Manchester, N.H. – Healthcare Interactive, Inc. (HCIactive), a provider of digital health and technology services, announced that a cyber‑attack in July 2025 resulted in the unauthorized copying of files from its computer network. The breach impacted the personal health information of more than 12,000 residents of New Hampshire.
What information was exposed?
The compromised data set includes Social Security numbers, blood test results, biometric identifiers, as well as health‑insurance enrollment details and claims information. While the company has not disclosed the exact number of records containing each data type, it confirmed that the breach involves highly sensitive personal and medical information.
Company response and notification process
HCIactive’s parent organization stated that it has promptly notified every individual whose data was affected. The company is offering free credit‑monitoring services and identity‑theft protection to help residents safeguard their personal information. In addition, HCIactive is working with federal and state law‑enforcement agencies, as well as independent cybersecurity experts, to investigate the incident and strengthen its network defenses.
Impact on New Hampshire residents
New Hampshire’s Attorney General’s Office has been alerted to the breach and is monitoring the situation closely. State officials have urged residents who received notification letters to review their credit reports, change passwords on any affected accounts, and remain vigilant for signs of identity theft. The breach underscores the growing risk that health‑care providers face as they increasingly store and transmit digital medical records.
Broader context of health‑data security
Data breaches in the health‑care sector have risen sharply in recent years, driven by sophisticated ransomware attacks and the expanding use of cloud‑based platforms. Experts stress that protecting patient information is not only a matter of privacy but also a critical component of public health, as compromised data can hinder timely medical care and erode trust in health‑care institutions.
What residents can do now
Anyone who received a notice from HCIactive should:
- Enroll in the free credit‑monitoring service offered by the company.
- Check credit reports from the three major bureaus for any unauthorized activity.
- Consider placing a fraud alert or credit freeze on their accounts.
- Report suspicious activity to the Federal Trade Commission and the New Hampshire Attorney General’s Office.
HCIactive has pledged to keep affected individuals updated as the investigation progresses and to implement additional security measures to prevent future incidents.
Original reporting: WMUR (Hearst) – local news — read the source article.