Jackson Lewis

Any-Time Home Care, Inc. experienced a ransomware attack on March 17, 2026, resulting in file encryption. On April 13, 2026, the company determined that PII, including names, addresses, social security numbers, and dates of birth, may have been accessed. Two New Hampshire residents were affected. The company implemented security enhancements including MFA upgrades, EDR deployment, and offered identity theft protection services.

Yorozu Automotive Tennessee, Inc. notified the New Hampshire Attorney General of a ransomware incident occurring October 9-13, 2024. The breach affected 2 New Hampshire residents, exposing PII including SSNs, driver's licenses, financial account info, and medical data. The organization engaged third-party experts, enhanced security controls (MFA, password updates), and provided 12 months of credit monitoring to affected individuals.

TransGlobal Insurance Agency reported a ransomware incident where four MongoDB databases were wiped following an automated scanning attack exploiting a misconfigured authentication state. The incident affected 1,880 Washington residents, exposing names, SSNs, driver's licenses, and DOBs. TransGlobal engaged forensic investigators, reported to the FBI, migrated to MongoDB Atlas, and implemented enhanced security controls.

TransGlobal Insurance Agency notified the Idaho AG that a cyberattack on or around Feb 19, 2026, compromised PII (SSN, DL, DOB, name, address) of 16 Idaho residents. Discovered Feb 24, 2026. FBI engaged; forensic experts retained. Notifications with credit monitoring sent April 16, 2026.

Jackson Lewis P.C. is a United States-based law firm specializing exclusively in workplace law and employment-related legal services. Founded in 1958 and headquartered in New York, the firm operates across numerous offices throughout the country. It advises employers on labor relations, workplace safety, litigation, immigration, and employee benefits, serving clients across a wide range of industries nationwide.

Arthur Ashe Institute for Urban Health Inc. notified the New Hampshire Attorney General of a cyberattack occurring between April 4, 2025, and May 18, 2025. The incident involved unauthorized access to PII of 1 New Hampshire resident, including names, SSNs, driver's licenses, financial account info, and medical data. The organization detected the breach on September 22, 2025, implemented MFA, updated passwords, and provided 12 months of credit monitoring.

Anchorage Neighborhood Health Center (ANHC) notified the Washington Attorney General of a criminal cyberattack affecting 3,226 Washington residents. The incident, discovered on October 10, 2025, exposed PII including names, SSNs, driver's licenses, and PHI including medical treatment and health insurance information. ANHC engaged third-party experts, deployed EDR, rebuilt servers, reset passwords, and offered 12 months of credit monitoring.

Anchorage Neighborhood Health Center (ANHC) notified the New Hampshire Attorney General of a criminal cyberattack affecting approximately 36 NH residents. Discovered on October 10, 2025, the incident involved unauthorized access to systems containing PII (names, DOB, SSN, driver's licenses) and PHI (medical treatment, health insurance). ANHC engaged third-party experts, deployed 24/7 EDR, rebuilt servers, and reset passwords. Affected individuals received credit monitoring via Experian.

American Israel Public Affairs Committee (AIPAC) notified the New Hampshire Attorney General of a cyberattack affecting one NH resident. Unauthorized access occurred between October 20, 2024, and February 6, 2025. AIPAC determined on August 28, 2025, that PII (names, SSNs, driver's licenses, financial/health data) was accessed. AIPAC engaged third-party experts, upgraded security controls, and provided 12 months of credit monitoring to the affected individual.

Space Coast Vascular notified the NH Attorney General of a criminal cyberattack affecting 8 NH residents. Discovered Aug 7, 2025. Data involved: names, DOB, SSN, driver's licenses, medical/insurance info, financial accounts. SCV secured systems, replaced firewalls, and offered 12 months credit monitoring.

Medical Associates of Brevard, LLC notified the New Hampshire Attorney General of a criminal cyberattack affecting 100 NH residents. Discovered July 7, 2025, the incident exposed PII including names, SSNs, driver's licenses, and PHI. MAB secured systems, replaced firewalls, and provided 12 months of credit monitoring.

Medical Associates of Brevard, LLC, a healthcare provider, reported an external system breach (hacking) occurring on January 17, 2025, discovered on July 7, 2025. The incident impacted PHI and PII, including names. 107 Maine residents were affected. The company engaged third-party experts, secured systems, and provided 12 months of credit monitoring via Experian.

Boyd Corporation notified the Maryland AG of a criminal cyberattack impacting an employee email account on Dec 10, 2024. One Maryland resident's PII (names, SSNs, driver's licenses, financial accounts, health info) was potentially exposed. Boyd engaged third-party experts, secured systems, and provided 12 months of credit monitoring. Remediation included enhanced email security and employee training.

Ott Cone & Redpath, P.A. notified the Maryland AG of a criminal cyberattack impacting a firm email account on or about October 31, 2024. The incident affected 93 Maryland residents, exposing names, DOBs, SSNs, and medical/insurance info. Ott Cone engaged third-party experts, secured systems, and provided 12 months of credit monitoring.

Ott Cone & Redpath, P.A. notified the NH AG of a criminal cyberattack impacting a firm email account on Oct 31, 2024. Six NH residents' PII was potentially accessed. The firm engaged forensic experts, deployed EDR, strengthened email security/MFA, and provided credit monitoring.

Van Wagner Group, LLC notified the NH AG of a malware incident occurring between Aug 3-9, 2024, discovered Aug 27, 2024. ~5,354 individuals affected (10 NH residents). PII involved. Notifications sent Oct 31, 2024 with credit monitoring. Remediation included password changes and firewall strengthening.

Edwards CPA Group P.C. notified NH AG of unauthorized system access occurring June 2-3, 2024, discovered June 27, 2024. Incident affected 574 NH residents with PII. No ransomware involved; no evidence of data removal. Remediation included cloud migration, password resets, and new SOC monitoring provider.

Atlantic States Marine Fisheries Commission (ASMFC) notified New Hampshire AG of a ransomware incident affecting 186 NH residents. The attack occurred March 14–April 6, 2024. ASMFC engaged forensic experts, notified law enforcement, and offered 24 months of identity theft protection services.

Fox & Company Wealth Management notified the NH AG of a July 13, 2023 incident where unauthorized actors accessed client personal info (names, addresses, financial data) via compromised credentials. The firm disabled access, reset credentials, engaged forensic experts, and reported to the FBI. Notices were sent July 15, 2023, offering credit monitoring.

Jackson Lewis P.C. reported the theft of two hard drives from a locked storage room in one of its offices on January 7, 2022. The drives contained personal information of personnel and clients, including full names and other data. The firm determined on August 16, 2022, that personal information was stored on the stolen drives. The incident did not involve network intrusion. Jackson Lewis is offering complimentary credit monitoring services to affected individuals.

BTCE Inc d/b/a Great Fermentations notified the NH AG of a data incident involving its third-party payment processor, CommerceV3. Unauthorized access occurred between Nov 2021 and Dec 2022, impacting cardholder data of 31 NH residents. GF provided credit monitoring and implemented security measures.

Stanly Community College notified NH AG of a cyberattack impacting employee email accounts. Unauthorized access occurred between July 2021 and Sept 2021. One NH resident's PII was accessed. College engaged third-party experts, reset passwords, enabled MFA, and offered credit monitoring.

Charter Foods, Inc. (including Charter Foods North, LLC and Charter Central, LLC) notified the New Hampshire Attorney General of a criminal ransomware attack. The incident occurred between January 11-13, 2023, and was discovered on February 27, 2023. The attack potentially impacted PII for 3,990 New Hampshire residents. Notices were sent to affected individuals on April 7, 2023. Charter Foods implemented security enhancements including new firewalls, EDR software, and encrypted backups, and offered credit monitoring services.

Jackson Lewis P.C. filed a supplemental notice with the New Hampshire Attorney General regarding the theft of two hard drives containing names and SSNs of employees and clients. The drives were stolen on January 7, 2022. The firm detected the data storage on August 16, 2022, and identified affected individuals by November 19, 2022. 59 New Hampshire residents are affected. The firm engaged law enforcement and offered credit monitoring.

Jackson Lewis P.C. notified consumers that on January 7, 2022, two hard drives containing personal information (names, SSNs, DOBs) were stolen from a locked office storage room. The drives were unencrypted. The firm investigated, worked with law enforcement, and offered 12 months of Experian IdentityWorks. No evidence of misuse was found.