About Coos County Family Health Services
Coos County Family Health Services, a non-profit healthcare provider based in Berlin, New Hampshire, has experienced a data breach. The breach was discovered on October 2, 2025, and involved unauthorized access to their external systems, specifically through hacking. A total of 40,185 individuals were affected, including 1,222 residents of Maine. The compromised data includes personal identifiers and various sensitive information of patients.
What Happened
On July 9, 2025, Coos County became aware of suspicious activity related to its phone systems and servers. Coos County began an investigation to determine the nature and scope of the activity and took steps to secure its systems. The investigation determined that there was unauthorized access to the servers on July 9, 2025, during which an unauthorized party may have viewed or copied data. In an abundance of caution, Coos County reviewed the files that may have been impacted and, on August 12, 2025, confirmed they contained patient information. Coos County then worked to reconcile the individual records and determine contact information for patients. This involved extensive internal data review and reconciliation to identify individuals, confirm the legitimacy of the records, deduplicate records, and validate contact information in furtherance of determining the notice population. This process was completed on or around September 26, 2025. Coos County then worked with a notification vendor to validate contact information and on, October 2, 2025, it was determined that notice would be provided to approximately one thousand two hundred twenty-two (1,222) Maine residents. The information related to Maine residents that was found in the relevant files includes names, dates of birth, contact information, Social Security numbers, medical identification numbers and medical information.
The breach affected patients whose personal and medical information was accessed on July 9, 2025. The incident potentially involved unauthorized viewing or copying of data by an external party. Coos County Family Health Services identified the breach on October 2, 2025.
Next Steps
Affected individuals are advised to remain vigilant and monitor their accounts for any suspicious activity. Coos County Family Health Services has notified federal law enforcement and is working with a notification vendor to ensure all impacted individuals are informed. They recommend reviewing account statements and medical records closely. Additionally, individuals should consider placing a fraud alert on their credit files to enhance protection against identity theft.
Identity Theft Protection Services
To support impacted individuals, Coos County Family Health Services is offering 12 months of credit monitoring services through TransUnion. This service will help individuals detect any unauthorized use of their personal information and provide tools to manage their credit profiles effectively. Notified individuals are encouraged to take advantage of these services to ensure their personal information remains secure. Additionally, Coos County has reported the incident to major credit reporting agencies and relevant state regulators.