Wilson, Elser, Moskowitz, Edelman & Dicker LLP

About Women OB/Gyn, PC reported a data event in New Hampshire affecting 1 resident. Unauthorized access occurred between Dec 1-7, 2025, involving viewing and copying of names, financial account/access info, and medical records. The breach was discovered on Dec 7, 2025. Notices were mailed Aug 27, 2026, offering 12 months of credit monitoring.

Upstaging, Inc. experienced unauthorized access to its network environment between May 28, 2026, and June 2, 2026. The company discovered unusual activity on June 2, 2026. An investigation revealed that certain information, including Social Security numbers, may have been copied by an unauthorized individual. One New Hampshire resident was affected. Upstaging engaged forensic specialists, retained legal counsel, and offered 12 months of complimentary credit monitoring and identity theft restoration services to affected individuals. Notification letters were mailed on August 5, 2026.

Heart of America Medical Center detected suspicious network activity on June 12, 2025, leading to unauthorized access by a third party. The incident potentially compromised personal information, including names, addresses, dates of birth, Social Security Numbers, and clinical/health insurance data. Two New Hampshire residents were affected. The organization isolated systems, engaged forensic investigators, and is offering credit monitoring.

New Hampshire Attorney General notice regarding a cybersecurity event at Little Bonanza, Inc. DBA Bonanza Casino. The company became aware of unauthorized access and file copying on February 21, 2026. One New Hampshire resident was affected, with Social Security numbers and driver's license information exposed. The company engaged forensic specialists, notified the FBI, and provided credit monitoring services. Notification letters were mailed on July 8, 2026.

Orthopaedic Specialists of Massachusetts (OSM) experienced unauthorized access to its network between January 12 and January 15, 2026. OSM became aware of suspicious activity on January 15, 2026. An investigation revealed that an unauthorized individual may have copied patient and employee information, including names, addresses, SSNs, and medical records. A total of 244 individuals were affected, including 46 New Hampshire residents and 244 Rhode Island residents. OSM offered 12 months of credit monitoring.

Taos Mountain Casino reported a cybersecurity incident discovered on March 28, 2026, involving unauthorized access to computer systems. The breach affected 3 Nebraska residents, exposing names, addresses, and Social Security numbers. TMC disconnected network access, engaged forensic investigators, reset credentials, and offered 12 months of credit monitoring via Kroll. Notifications were mailed on June 9, 2026.

Taos Mountain Casino detected suspicious activity on its computer systems on March 28, 2026. A forensic investigation found evidence that an unauthorized actor accessed some files. The incident potentially affected one New Hampshire resident, whose name, address, and Social Security number may have been accessed. The casino disconnected network access, engaged a third-party cybersecurity firm, changed credentials, and is offering 12 months of credit monitoring through Kroll.

Community Connections, a not-for-profit healthcare provider, notified the New Hampshire Attorney General of a cybersecurity incident discovered on March 20, 2026. Unauthorized access occurred from March 18-20, 2026, potentially exposing names, SSNs, DOBs, medical, and financial information of one NH resident. The company engaged forensic investigators, isolated systems, and offered 12 months of credit monitoring.

Ohio ENT & Allergy Physicians reported the loss or theft of a device containing patient information on March 29, 2026, discovered on March 30, 2026. The incident affected 324 individuals, including 1 Maine resident. The organization notified affected individuals in writing on May 29, 2026, and offered 12 months of credit monitoring and identity protection services.

Southern Illinois OB-GYN detected suspicious network activity on November 24, 2025, leading to a network interruption. A forensic investigation determined that an unauthorized third party potentially viewed or downloaded data, including names, SSNs, dates of birth, and health information. Six New Hampshire residents were affected. The organization isolated systems, engaged forensic experts, and is offering credit monitoring.

U.S. 1031 Exchange Services, Inc. reported a supplemental cybersecurity incident to the Maine Attorney General. An external breach occurred on October 6, 2025, discovered on October 16, 2025. The incident compromised names, addresses, SSNs, and bank account/routing numbers for approximately 2,090 individuals total, including 5 Maine residents. The company engaged forensic investigators, reset passwords, implemented MFA, and offered credit monitoring services.

Supplemental notice from U.S. 1031 Exchange Services, Inc. regarding a cybersecurity incident first discovered on October 16, 2025. Unauthorized access compromised names, addresses, SSNs, and bank account/routing numbers for 1,208 individuals, including 4 New Hampshire residents. Response included forensic investigation, password resets, MFA implementation, and 12 months of credit monitoring.

Gateways Community Services, a non-profit provider of home and community-based services, reported a cybersecurity incident discovered on February 2, 2026. The incident involved the compromise of an employee's email account via a phishing email, resulting in the exposure of Form W-2 data (including names, addresses, SSNs, and tax withholdings) for 689 individuals, including 15 Maine residents. Gateways engaged forensic investigators, secured the account, and notified affected individuals on May 5, 2026, offering credit monitoring services.

Charles River Insurance Brokerage, Inc. notified the NH AG of a cybersecurity incident discovered on Sept 19, 2025. Unauthorized access impacted employee data including names, SSNs, DOBs, and bank details. 197 individuals affected, 5 in NH. Notifications mailed April 27, 2026, with credit monitoring via Kroll.

U.S. 1031 Exchange Services, Inc. reported an external system breach (hacking) on October 6, 2025, discovered on October 16, 2025. The incident compromised names, addresses, SSNs, and bank account/routing numbers of 882 individuals. The company engaged forensic investigators, reset passwords, implemented MFA, and offered 12-24 months of credit monitoring. Notification was sent on April 23, 2026.

U.S. 1031 Exchange Services, Inc. reported a cybersecurity incident discovered on October 16, 2025, involving unauthorized access to files containing names, addresses, Social Security numbers, and bank account/routing numbers. 882 individuals were affected, including 2 Nebraska residents. The company engaged forensic investigators, shut down workstations, reset passwords, implemented MFA, and offered 12 months of credit monitoring. Notices were mailed on April 23, 2026.

Westwood Country Club detected suspicious network activity on October 17, 2024. An unauthorized actor accessed and copied files containing personal information. The incident affected 6 Maryland residents. Compromised data included names, Social Security numbers, driver's license numbers, financial account information, health insurance information, and medical information. The organization engaged a cybersecurity firm, secured its network, and offered 24 months of credit monitoring.

Ahmuty Demers & McManus (ADM), a law firm, notified the Maryland Attorney General of a cybersecurity event discovered on February 26, 2025. An unauthorized actor viewed and copied data, impacting one Maryland resident. Compromised data included names and Social Security numbers. ADM engaged a third-party cybersecurity firm, conducted a data review completed March 11, 2025, and offered 12-24 months of credit monitoring. Notification letters began mailing on March 27, 2025.

Eliza Jennings Senior Care Network reported a cybersecurity incident discovered on March 5, 2025, involving unauthorized access to its network. The breach potentially exposed names, Social Security numbers, and financial account numbers for 4,012 individuals, including one Maryland resident. The company engaged forensic specialists, notified law enforcement, and mailed notification letters on March 31, 2025, offering credit monitoring services.

Laurel Eye Clinic (LEC) notified the Nebraska Attorney General of a cybersecurity incident discovered on January 26, 2025. An unauthorized user obtained certain LEC files, potentially exposing Social Security Numbers and names of one Nebraska resident. LEC disconnected network access, engaged forensic investigators, changed credentials, and offered 12 months of credit monitoring. No identity theft reports were received.

Laurel Eye Clinic notified the New Hampshire Attorney General of a cybersecurity incident discovered on January 26, 2025. An unauthorized user obtained certain files containing names, financial account numbers, and routing numbers. Four New Hampshire residents were identified and notified on April 22, 2026. The clinic engaged forensic investigators, disconnected network access, and offered 12 months of credit monitoring.

Laurel Eye Clinic, a healthcare provider, reported an external system breach (hacking) on January 22, 2025, discovered on January 26, 2025. The incident compromised names and financial account numbers for 42,295 individuals, including 22 Maine residents. Notices were sent on April 22, 2026, offering 12 months of credit monitoring.

Microforum Services Group notified the New Hampshire Attorney General of a data event occurring between December 18 and 22, 2025, discovered on December 22, 2025. The incident involved unauthorized copying of customer name, contact, and credit card information. One New Hampshire resident was affected. Microforum engaged forensic specialists, retained counsel, and provided 24 months of credit monitoring via TransUnion. Notification letters were mailed on April 21, 2026.

Blanchard Training & Development, Inc. reported an external system breach (hacking) occurring March 3-4, 2026, discovered March 4, 2026. One Maine resident was affected. The company retained legal counsel and forensic specialists, and is offering 12 months of credit monitoring via TransUnion/Cyberscout.

New Hampshire Historical Society notified the NH Attorney General of a data event discovered on February 13, 2026. Unauthorized access resulted in the copying of names and Social Security numbers for 63 NH residents. The Society engaged forensic investigators and legal counsel, mailed notifications on April 1, 2026, and offered 12 months of credit monitoring via TransUnion/Cyberscout.