Zumpano Patricios, P.A. (ZP Law), a law firm acting as a business associate for healthcare providers, notified the NH AG of a cyber-attack intrusion detected on May 6, 2025. An unauthorized third party accessed and potentially exfiltrated files containing patient PII (SSN, DOB, names) and PHI. ZP Law changed passwords, blocked access, engaged forensic experts, and notified law enforcement. Two NH residents are affected. ZP Law is offering credit monitoring via IDX.
Affected (this filing): 2