Gateways Community Services

Gateways Community Services, a New Hampshire nonprofit, notified the NH Attorney General of a cybersecurity incident discovered on February 2, 2026. The breach resulted from a phishing email that compromised an employee's email account, exposing Form W-2 data (names, addresses, SSNs, tax withholdings) for 689 individuals, including 627 NH residents. Gateways secured the account, engaged forensic investigators, implemented MFA and enhanced training, and offered 12 months of credit monitoring.

Affected (this filing): 689

Gateways Community Services, a non-profit based in Nashua, NH, filed a Maine AG data breach notice reporting a cyber incident occurring and discovered on 2/2/2026, affecting 689 individuals total (15 Maine residents). The breach description was reported as 'Other' and the specific data elements compromised were not enumerated in this filing. Written notifications were sent on 5/5/2026, and 12-24 months of TransUnion identity theft protection services were offered. The notice letter (ME_AG_Notice_of_Cyber_Incident_-_Gateways.pdf) was referenced but its content not included in this extraction.

Affected (this filing): 689