⛰️New Hampshire State AGlinked via multistate filing link · 100%
Clustered 6 filings across 6 jurisdictions · filing window Dec 31, 2025 → Jan 5, 2026. View entity profile → Other incidents for this victim →
incident inc_4d98d36388434085 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
PII · PHI
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA ME MT NH TX VT
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
May 18, 2025
When the intrusion reportedly occurred, per the linked filings
May 26, 2025
Reported by NEW HAMPSHIRE AG, MAINE AG, VERMONT AG, CALIFORNIA AG, TEXAS AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Covenant Health, Inc. filed a supplemental notification with the New Hampshire Attorney General regarding a data security incident. An unauthorized party accessed the IT environment on May 18, 2025, after unusual activity was detected on May 26, 2025. The breach affected 154,188 New Hampshire residents, exposing names, addresses, DOBs, SSNs, medical record numbers, and treatment information. Covenant Health engaged forensic specialists, notified law enforcement, and offered one year of Experian IdentityWorks to affected individuals. Notifications were mailed on December 31, 2025.
Affected (this filing): 154,188
Covenant Health, Inc. reported an external system breach (hacking) occurring on May 18, 2025, discovered on May 26, 2025. The incident affected 478,188 individuals, including 284,529 Maine residents. Affected data included names and personal identifiers combined with government-issued identifiers. Covenant Health sent written notifications starting July 11, 2025, and provided 12 months of identity monitoring and restoration services through Experian.
Affected (this filing): 478,188
Covenant Health, Inc. notified consumers of a data breach where an unauthorized party accessed its IT environment starting May 18, 2025. The incident exposed patient information including names, addresses, SSNs, medical record numbers, and health insurance details. Covenant Health engaged forensic specialists, enhanced IT security, and offered one year of Experian IdentityWorks to affected individuals.
Covenant Health, Inc. reported a data security incident where an unauthorized party gained access to its IT environment on May 18, 2025. The organization detected unusual activity on May 26, 2025, and contained the incident. Affected data includes patient names, addresses, dates of birth, medical record numbers, health insurance information, and treatment details. Third-party forensic specialists were engaged to investigate. No specific malware or threat actor was identified.
Covenant Health, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2026-01-02. The breach occurred from 05/18/2025 to 05/26/2025. 76 Montana residents were affected.
Affected (this filing): 76
Covenant Health, Inc. based in Andover, Massachusetts, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-26 and reported on 2026-01-05. 1,101 Texas residents were affected. 478,188 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.
Affected (this filing): 1,101