Harbin Clinic, LLC notified the New Hampshire Attorney General that a third-party vendor, Nationwide Recovery Services, Inc. (NRS), experienced a data security incident. Unauthorized access to NRS systems occurred between July 5-11, 2024, resulting in the illegal copying of files. The incident potentially affected 12 New Hampshire residents (patients and guarantors) whose personal information was stored on NRS systems. Harbin Clinic blocked vendor access, conducted internal system reviews, and engaged privacy teams. Notifications were sent on May 16, 2025, offering Kroll identity monitoring services.