MCDONALD HOPKINS LLC

American Board of Preventive Medicine (ABPM) notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 81 NH residents. Unauthorized access occurred March 8-10, 2026; discovered September 24, 2026. Compromised data included names, SSNs, bank account info, and credentials. ABPM engaged forensic investigators, notified residents starting October 12, 2026, and offered one year of credit monitoring.

The Legal Aid Society notified the NH Attorney General that an unauthorized actor accessed a limited number of email accounts between March 13, 2025, and August 1, 2025. On September 9, 2026, following forensic investigation, the organization determined that personal information of two New Hampshire residents, including full names, Social Security numbers, and health insurance information, was potentially compromised. The organization contained the threat, secured its email environment, engaged external cybersecurity professionals, and is offering one year of complimentary credit monitoring to affected individuals.

Hood River Dental detected a network security incident on October 22, 2025. An investigation concluded on September 8, 2026, that protected health information for one New Hampshire resident may have been accessed. Affected data included address, phone number, date of birth, provider name, patient ID, and dental insurance plan name. The organization contained the network, engaged third-party experts, reset passwords, enabled MFA, and notified the affected individual on October 8, 2026.

Strong Foundations Charter School notified the NH Attorney General of unauthorized access to a limited number of email accounts on July 28, 2026. The incident potentially impacted two New Hampshire residents, exposing full name, state identification number, and financial account information. The school contained the incident immediately, engaged external cybersecurity professionals, and notified affected individuals on September 29, 2026.

DriveWealth LLC notified the Iowa Attorney General of a security incident occurring between September 4 and 5, 2026. Unauthorized access resulted in the exfiltration of Iowa residents' full names, Social Security numbers, and partial account numbers. DriveWealth contained the compromise on September 5, 2026, and began notifying approximately 143,173 affected residents on September 29, 2026, offering complimentary credit monitoring services.

Aesto, LLC, a provider of healthcare data migration and archiving services, experienced a network security incident impacting its Amazon Web Services infrastructure. Unauthorized access to patient information, including names and Social Security numbers, occurred between December 2 and December 18, 2025. The incident was discovered on December 18, 2025. Approximately 25 New Hampshire residents were affected. Aesto engaged external cybersecurity professionals for a forensic investigation and notified the third-party customer, Consensus Medical Group, and the U.S. Department of Health and Human Services. Affected individuals are offered 12 months of complimentary credit monitoring.

Impact Melanoma Inc. notified the NH Attorney General of unauthorized access to employee email accounts. The company became aware of the incident on May 26, 2026, and contained it immediately. A forensic investigation confirmed on September 10, 2026, that personal information (name and SSN) of one New Hampshire resident may have been accessed prior to May 26, 2026. The affected individual was notified on September 21, 2026, and offered 12 months of credit monitoring.

Gastroenterology & Hepatology of Central New York, P.C. notified the NH Attorney General of a data security incident affecting approximately 32 New Hampshire residents. On March 6, 2026, an unauthorized party accessed network systems. Forensic investigation concluded on August 28, 2026, that records containing PHI, SSNs, and other PII were acquired. The organization contained the threat, notified law enforcement, and engaged external cybersecurity professionals. Credit monitoring services were offered to affected individuals.

Click2Mail dba C2M LLC notified the NH Attorney General of a security incident affecting 11 New Hampshire residents. The company became aware of potentially unauthorized access to its network on July 6, 2026. An investigation revealed that keystroke data was captured from online transactions by an unauthorized actor, potentially exposing names and credit card information. The company secured its network, engaged external cybersecurity professionals, and contained the threat. The investigation is ongoing.

Affordable Mortgage Advisors d/b/a HMA Mortgage notified the NH Attorney General that an unauthorized actor accessed its systems between July 7, 2025, and September 9, 2025. The company discovered the incident on August 25, 2025. Personal information, including full name and Social Security Number, of one New Hampshire resident may have been acquired. The company engaged outside cybersecurity professionals, secured systems, and offered credit monitoring.

Opportune LP, a vendor in the oil & gas industry, experienced a cybersecurity incident where an unauthorized actor gained access to its network environment on or about June 22, 2026. The company discovered on August 18, 2026, that the impacted systems contained personal information, including names and Social Security Numbers, of approximately 72 New Hampshire residents. Opportune contained the threat, engaged external cybersecurity professionals, and is offering one year of complimentary credit monitoring to affected individuals.

Abramson, Brown & Dugan, a law firm in Manchester, NH, discovered unauthorized access to its network on or around April 2, 2026. An investigation revealed that personal information of approximately 1,899 New Hampshire residents was potentially accessed or removed, including names, Social Security numbers, driver's license/state ID numbers, Taxpayer ID numbers, or financial account numbers. The firm contained the network, restored systems, and engaged outside cybersecurity professionals. Affected residents are being offered two years of complimentary credit monitoring.

Doleac Electric Company, Inc. notified the NH Attorney General of unauthorized access to its network between January 26 and February 3, 2026. The company became aware of the incident on February 2, 2026. One New Hampshire resident was affected, with potential exposure of name and Social Security number. The company secured its network, engaged forensic investigators, and provided credit monitoring services to the affected individual.

The City of Keene, New Hampshire, experienced an inadvertent email disclosure on July 23, 2026, where an unredacted document containing names and Social Security numbers was sent to 43 New Hampshire residents. The City recalled the message, investigated, and confirmed the data exposure on July 29, 2026. Affected individuals were notified in late August 2026 and offered 12 months of identity monitoring.

Castle Management, LLC notified the NH Attorney General of an incident where an unauthorized actor may have accessed its network between September 2025 and February 2026. Forensic investigation concluded on August 11, 2026, that personal information of 4 New Hampshire residents, including names, SSNs, DOBs, driver's licenses, and financial account numbers, may have been compromised. The company contained the threat, engaged external cybersecurity professionals, and offered credit monitoring services.

Williams Brothers Construction Co., Inc. detected unauthorized network activity on January 10, 2026. Investigation determined unauthorized access occurred between January 10-11, 2026, affecting approximately 2 New Hampshire residents. Data exposed included names and Social Security numbers. The company engaged third-party cybersecurity experts, secured systems, and is offering one year of complimentary credit monitoring. Notifications were sent on August 19, 2026.

Oakdale Ear Nose & Throat PA d/b/a Minnesota ENT detected unauthorized access to six user email accounts on January 16, 2026. An investigation determined that personal and health information, including SSNs and medical records, may have been accessed from one mailbox. Two New Hampshire residents were affected. The organization secured the network, changed passwords, engaged external cybersecurity professionals, and is offering credit monitoring services.

Bahrie Law, PLLC experienced unauthorized access to its network between March 30 and April 1, 2026. The firm detected the activity on April 2, 2026, and contained the incident. A forensic investigation concluded on July 22, 2026, that personal information of approximately four New Hampshire residents was potentially accessed. Affected data included names, dates of birth, Social Security numbers, financial account information, driver's license numbers, and medical information. The firm is providing credit monitoring and fraud assistance to affected individuals.

Task Force Power, Inc. notified the NH Attorney General that an unauthorized actor accessed limited email accounts between Sept 10, 2025, and Jan 7, 2026. The company discovered the impact on July 21, 2026, after forensic investigation. One New Hampshire resident was affected, with exposure of name, SSN, financial account info, and passport number. No evidence of fraud was found. The company contained the incident, engaged external cybersecurity professionals, and provided credit monitoring to the affected individual.

CTS Journey Holdings, LLC (DBA Corporate Travel Service) notified the NH Attorney General of a cybersecurity incident where an unauthorized actor accessed its network between December 3, 2025, and December 11, 2025. The company discovered on July 2, 2026, that personal information of approximately 8 New Hampshire residents was impacted. Affected data included names, Social Security numbers, financial account information, and credit/debit card numbers. CTS engaged external cybersecurity professionals, contained the threat, and is offering one year of complimentary credit monitoring to affected residents with SSNs.

CareCloud, Inc. notified the New Hampshire Attorney General on July 31, 2026, of a breach affecting approximately 68,886 NH residents. Between March 10 and March 16, 2026, an unauthorized third party accessed a CareCloud AWS environment and exfiltrated data. Affected data included names, SSNs, DOBs, driver's license numbers, and PHI (health insurance, medications, allergies). Credit card info (including CVV) was affected for a limited subset. CareCloud engaged forensic investigators, reported to law enforcement, and is offering credit monitoring and identity theft protection services.

Hilldun Corporation notified the New Hampshire Attorney General of a cybersecurity incident affecting 2 NH residents. Unauthorized access occurred between August 29, 2025, and September 9, 2025. The breach involved the exfiltration of names and Social Security numbers. Hilldun engaged third-party forensic investigators, contained the network, and is offering complimentary credit monitoring to affected individuals. Notification to residents began July 24, 2026.

Questo, Inc. notified the NH Attorney General of unauthorized access to its network affecting approximately 7 New Hampshire residents. The incident occurred between October 1 and October 9, 2025, and was discovered on October 9, 2025. Affected data includes full names, Social Security numbers, and financial account numbers. Questo contained the incident, engaged outside cybersecurity professionals, and is providing complimentary identity monitoring through Kroll to affected individuals.

Tombigbee Healthcare Authority dba Whitfield Regional Hospital notified the NH Attorney General of a cybersecurity incident affecting 2 New Hampshire residents. Unauthorized access occurred between May 15, 2025, and June 8, 2025, and was detected on June 8, 2025. Affected data may include names, dates of birth, medical information, financial account information, driver's license numbers, and Social Security numbers. The hospital secured its network, engaged forensic investigators, and is offering 12 months of credit monitoring.

Averhealth Holdings detected unusual activity in its email environment on January 20, 2026. An investigation concluded on May 6, 2026, that personal information of 12 New Hampshire residents may have been accessed. Affected data included names, dates of birth, diagnoses, health insurance policy numbers, medical costs, dates of service, provider names, medical record numbers, and treatment information. Social Security numbers were not affected. The company secured the email environment, engaged cybersecurity professionals, and offered one year of credit monitoring.