Rochester Philharmonic Orchestra (RPO) notified the New Hampshire Attorney General of a data security incident affecting 2 New Hampshire residents. Unauthorized access occurred on October 21, 2025, when servers went offline. RPO engaged cybersecurity experts and determined on November 11, 2025, that specific network sections were accessed. Personal information, including names, SSNs, driver's licenses, health insurance, medical info, and passport numbers, may have been compromised. No evidence of misuse was found. RPO notified residents on May 27, 2026, and offered 12 months of credit monitoring and identity protection services through IDX.
Affected (this filing): 2