Gateways Community Services

Gateways Community Services, a New Hampshire nonprofit, notified the NH Attorney General of a cybersecurity incident discovered on February 2, 2026. The breach resulted from a phishing email that compromised an employee's email account, exposing Form W-2 data (names, addresses, SSNs, tax withholdings) for 689 individuals, including 627 NH residents. Gateways secured the account, engaged forensic investigators, implemented MFA and enhanced training, and offered 12 months of credit monitoring.

Gateways Community Services notified Massachusetts residents on May 5, 2026, of a data security incident involving unauthorized access to personal information. The breach exposed W-2 forms containing names, addresses, Social Security numbers, and financial account data. Gateways engaged outside experts, enhanced IT security training, implemented MFA for VPN access, and updated policies. Affected individuals were offered 24 months of complimentary credit monitoring and fraud assistance through Cyberscout (a TransUnion company).

Gateways Community Services, a non-profit provider of home and community-based services, reported a cybersecurity incident discovered on February 2, 2026. The incident involved the compromise of an employee's email account via a phishing email, resulting in the exposure of Form W-2 data (including names, addresses, SSNs, and tax withholdings) for 689 individuals, including 15 Maine residents. Gateways engaged forensic investigators, secured the account, and notified affected individuals on May 5, 2026, offering credit monitoring services.