HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDMediumContained

United Medical Systems (DE), Inc.

bd_fa3dee1de26e213a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 20, 2026

To disclose

—

Affected

8state residents only

Linked

4 filings

Confidence

66%

Full breach record for United Medical Systems (DE), Inc. →

United Medical Systems (DE), Inc. notified the NH Attorney General of a data event where limited files may have been accessed or downloaded on December 19, 2025. Approximately 8 New Hampshire residents were affected, with exposure of name, Social Security number, and driver's license number. The company engaged third-party specialists, notified federal law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 19, 2025

Begins

May 20, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_8c9b95706ccdc2b92026-05-20Verified by operator
Maine State AGbd_b885f87de6d97c3f2026-05-20Verified by operator
Massachusetts State AGbd_d0385466ec4bfd742026-05-20Candidate

Name: United Medical Systems (DE), Inc.
norm: united medical systems

Name: United Medical Systems (DE), Inc.
norm: united medical systems de
Industry: Healthcarellm

Discovered: —
Breach occurred: Dec 19, 2025 – Dec 19, 2025
Materiality determined: —
Notification sent: May 20, 2026
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Regulator citations: Notified New Hampshire Office of the Attorney GeneralNotified federal law enforcement

During the incident: Took steps in response to detecting irregular activity
Engaged third-party specialists to conduct a comprehensive investigation
Notified federal law enforcement
Engaged third-party specialists to precisely determine what information was present
Issued written notification to relevant individuals
Offered complimentary credit monitoring and identity protection services for twelve (12) months
Changes made: Enhanced its existing cybersecurity infrastructure
Implemented additional policies and procedures to minimize the reoccurrence of a future similar matter
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 20 · first

Maine State AGMay 20 · first

Massachusetts State AGMay 20 · first

New Hampshire State AGMay 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/united-medical-systems-20260520.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 20, 2026
Raw hash: 6533eceda963b97af659ef3f4419387cc4b4a34522bc44b4c51f80f0aca3d883

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityUnited Medical Systems (DE), Inc.

Victim entityUnited Medical Systems (DE), Inc.

IncidentUnknown

Stated responseTook steps in response to detecting irregular activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov