Confirmed breach. Intrusion Aug 1, 2025, discovered Aug 1, 2025 — the first regulatory filing landed 33 days later. 20,871 individuals reported across the linked filings.
incident inc_978c0f1d5ff84416 · merge_method human · confidence 100%
Litigation Timing
Supplemental
Notification delay
33days
Discovered → first regulatory filing
Discovery variance
17days
Range of discovered_at dates across filings
Filing span
Regulatory clocksMaine✓ ME AG ≤30d · 16dHIPAA✓ HHS notifiedFull clock table in Litigation Timeline
HHS OCRState AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedmoderate sensitivity
Affected (total reported)
0days
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
20,871
Data types
2
Health (basic) · Identity (basic)
Jurisdictions
4
MA ME NH VT
Linked filings
4
HHS OCR · State AG
Affected residents by state
per-filing reported counts
NH1,521
VT106
ME13
State AGs report only their own residents; bars show per-filing counts.
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Aug 1, 2025
When the intrusion reportedly occurred, per the linked filings
Breach discovered
Aug 1, 2025
Reported by NEW HAMPSHIRE AG filing
Breach discoveredconflicts with Aug 1, 2025
Aug 18, 2025
Reported by MAINE AG, HHS OCR filings
🦞Maine State AGFirst filinglinked via tight-window match · 100%
Teamsters Union 25 Health Services & Insurance Plan reported a data breach to the Maine Attorney General's office, attributing the cause to an external system breach via hacking. The incident affected 13 Maine residents, who were notified and offered 12 months of credit monitoring and identity theft protection services from Transunion.
Affected (this filing): 13
⛰️New Hampshire State AGlinked via same-victim cross-source · 100%
Teamsters Union 25 Health Services & Insurance Plan (HSIP) notified the New Hampshire Attorney General of a data security event occurring on or about August 1, 2025. Unauthorized access to HSIP's network resulted in the potential copying of names and Social Security numbers for 1,521 New Hampshire residents. HSIP engaged third-party specialists, isolated the network, and mailed notifications to affected individuals on September 3, 2025, offering credit monitoring services.
Affected (this filing): 1,521
🏛️MASSACHUSETTSHHS OCRlinked via same-victim cross-source · 100%
Teamsters Union 25 Health Services & Insurance Plan, a health plan based in MA, reported to HHS OCR on 2025-09-03 a Hacking/IT Incident affecting 19,231 individuals. Breached information was located on a Network Server. No business associate was identified as present in connection with this breach.
Teamsters Union 25 Health Services & Insurance Plan notified consumers of a data breach. The notice, filed with the Vermont Attorney General on 2025-09-03, specifically identifies 106 impacted Rhode Island residents. Affected data includes identity information (name, SSN, DOB). The Plan is offering free credit monitoring and fraud assistance via Cyberscout/TransUnion.
Affected (this filing): 106
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.