IMS Care Center, LLC, a Phoenix, Arizona-based multispecialty medical group, disclosed a data breach involving unauthorized access to its email environment. The unauthorized activity occurred between June 17, 2026, and June 18, 2026, with the organization discovering unusual activity on June 18, 2026. Outside cybersecurity specialists were engaged to investigate the incident, and a regulatory notice was submitted to the New Hampshire Attorney General on October 16, 2026.
A comprehensive review of the impacted information concluded on September 30, 2026. The exposed data elements include patient names, addresses, Social Security numbers, and medical information, though the specific types of compromised data vary by individual. While the New Hampshire regulatory filing identified one resident affected, a complete nationwide count of impacted individuals has not been disclosed.
Notification letters were mailed to affected individuals starting on October 16, 2026. As regulatory reviews and investigations continue, additional details regarding the full scope of the breach and total affected individuals may emerge.