NAHGA Claim Services
Disclosed Nov 19, 202510 months ago181,160 affectedConfirmed
What is known
| People affected | 181,160 (as reported by the organization) |
|---|---|
| Disclosed | Nov 19, 2025 |
| Discovered | Apr 10, 2025 |
| Happened | Apr 8, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Health, Social Security numbers, Government IDs, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: NAHGA Claim Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: NAHGA Claim Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: NAHGA Claim Servicesjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: NAHGA Claim Services (Health Plan, ME)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004731: NAHGA Claim Servicesoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-12-15 NAHGA Claim Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Nov 19, 2025 | 21,834 |
| California AGresidents of CA | Dec 15, 2025 | |
| Washington AGresidents of WA | Dec 15, 2025 | 1,621 |
| Oregon DOJresidents of OR | Dec 15, 2025 | 181,160 |
| Vermont AGresidents of VT | Dec 15, 2025 | |
| Texas AGresidents of TX | Dec 16, 2025 | 46,372 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-12-15-nahga-claim-services-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","government-id","addresses"] · backfill source
- 2026-09-25 · records_basis: hhs to organization · backfill source
- 2026-09-25 · records: 21834 to 181160 · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 21834 · backfill source
- 2026-09-25 · disclosed: 2025-12-15 to 2025-11-19 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-04-10 · backfill source
- 2026-09-25 · occurred: empty to 2025-04-08 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.