Loading story…
National Accident Health General Agency (NAHGA), a Maine-based third-party administrator specializing in healthcare claims for youth sports, day care centers, and NCAA athlete accidents, reported a significant data breach affecting over 181,000 individuals. The breach, discovered in April, involved unauthorized access to NAHGA's network, potentially compromising sensitive claims data, including medical information and personal identifiers related to sports-related accidents. NAHGA responded by securing its systems and engaging third-party cybersecurity experts to investigate the incident, confirming that files and data were accessed or acquired between April 8 and April 11.
The affected data includes information from a wide range of clients, such as K-12 youth sports programs, NCAA athletic programs, and other specialty organizations. NAHGA has notified impacted individuals and submitted a breach report to the Maine attorney general, outlining the scope and nature of the compromised information. The company continues to work on mitigating the impact and enhancing its security posture to prevent future incidents.
See attribution, scope, and your downstream exposure.
4 events from the most recent confirmed update back to the earliest known activity.
At least one proposed federal class action lawsuit was filed against NAHGA alleging inadequate security practices in connection with the breach. The suit followed disclosure of the incident and the exposure of sensitive claimant data.
NAHGA began notifying affected individuals after concluding that over 181,000 people may have had sensitive personal and medical information exposed in the April breach. The notifications disclosed the scope of the compromised data and the potential impact on claimants.
After discovering the intrusion, NAHGA said it secured its systems and engaged third-party cybersecurity experts to investigate the incident. The company determined that data potentially affected included names, Social Security numbers, dates of birth, driver's license numbers, health insurance details, and medical or treatment information.
National Accident Health General Agency said an unauthorized party accessed its systems between April 8 and April 11, 2025. The incident potentially exposed personal, insurance, and medical information tied to youth sports and NCAA-related accident claims.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Central Maine Healthcare (CMH)** disclosed a data breach that exposed sensitive information for **145,381 individuals**, including patients and current/former employees. Attackers maintained unauthorized access to CMH systems for more than two months, from **March 19 to June 1** (discovered June 1), affecting an integrated healthcare delivery system serving roughly **400,000** people and operating facilities including **Central Maine Medical Center**, Bridgton Hospital, and Rumford Hospital. CMH reported that exposed data varied by individual but could include **full names, dates of birth, treatment information, dates of service, provider names, health insurance information, and Social Security numbers**. CMH’s investigation and impact analysis concluded on **November 6, 2025**, and the organization has been notifying affected individuals on a rolling basis while offering **free credit monitoring** and establishing a dedicated support line; CMH also warned of elevated risk of **phishing, impersonation, and fraud**, advising patients to review provider and insurance statements for suspicious activity.
Jun 29, 2026
Healthcare Interactive, a company specializing in AI-driven medical insurance benefit enrollment and billing solutions, confirmed a significant data breach that resulted in the exfiltration of sensitive customer data by hackers. The compromised information included names, dates of birth, Social Security numbers, contact details, health insurance enrollment data, patient diagnoses, provider names, lab results, medical images, and treatment plans. The breach also involved medical claims data, such as account numbers and billing codes. The incident occurred between July 8 and July 12, 2025, but was only detected around July 22, prompting the company to notify regulators and launch an internal investigation. The method of intrusion was not disclosed, leaving uncertainty about whether social engineering or phishing was involved. In a separate but related trend, Allianz Life, a major American insurance provider, reported a data breach in July 2025 that affected nearly 1.5 million individuals, including customers, financial professionals, and employees. The breach was traced to unauthorized access of a third-party cloud-based CRM system, with the ShinyHunters extortion group suspected to be behind the attack. Exposed data included names, addresses, dates of birth, and Social Security numbers, though earlier reports suggested additional information such as email addresses and phone numbers may have been compromised. Allianz Life has since notified affected individuals and authorities, and provided instructions for protective measures. Another incident involved ClaimPix, an Illinois-based auto insurance claims platform, where a misconfigured and unencrypted database exposed over 5.1 million files, totaling 10.7 terabytes of data. The exposed records included personal identifiable information, insurance documents, vehicle registrations, repair invoices, and images of damaged vehicles, as well as sensitive Power of Attorney documents that could facilitate fraud or impersonation. Archer Health, a U.S. provider of palliative and in-home care services, also suffered a data exposure due to a misconfigured database, leaking nearly 145,000 health records containing names, Social Security numbers, diagnostic details, and treatment plans. The company responded by securing the database and initiating an investigation, though it remains unclear if the data was accessed by malicious actors. These incidents collectively highlight a pattern of significant data breaches affecting the insurance and healthcare sectors, often involving misconfigured cloud storage or third-party service vulnerabilities. The breaches have exposed millions of individuals' sensitive personal and health information, raising concerns about the adequacy of cybersecurity measures in these industries. Regulatory notifications and investigations have been initiated in each case, but the full impact on affected individuals and organizations is still being assessed. The incidents underscore the critical need for robust data protection, regular security audits, and stringent oversight of third-party service providers. The exposure of highly sensitive data, including medical diagnoses and legal documents, increases the risk of identity theft, fraud, and other malicious activities. Organizations are urged to review their cloud security configurations and incident response protocols to prevent similar breaches. The healthcare and insurance sectors remain prime targets for cybercriminals due to the value of the data they hold. These breaches serve as a stark reminder of the evolving threat landscape and the importance of proactive cybersecurity strategies.
Jun 29, 2026
Brown Health Medical Group-MA disclosed a data breach affecting **311,760 individuals** after unauthorized activity was discovered on a legacy file server at its Hawthorn location in December 2025. The organization said the intrusion was limited to that historic file server and did **not** affect its electronic medical record or electronic health record systems, but a June 22, 2026 review found that files on the server had been accessed. The exposed information potentially included names, contact details, dates of birth, Social Security numbers, driver’s license and other government ID numbers, medical and disability records, financial account information, payment card data, and employment-related records. Brown Health Medical Group-MA reported the incident to the **HHS Office for Civil Rights** and state authorities in Massachusetts and Vermont, said no threat actor had been publicly identified or linked to a ransomware or extortion claim, and is offering affected individuals **24 months** of credit monitoring, fraud detection, and identity theft protection services.
Aug 6, 2026