2026 NFI North — network breach; 49,540 individuals (HHS OCR)
Data compromised
Names, addresses, DOB, SSNs, driver’s license numbers, financial account info, medical information, health insurance information
Technical writeup
Verified OCR/substitute notice summarized by HIPAA Journal — September 8, 2026. NFI North (NH/ME human-services nonprofit) identified suspicious network activity ~September 6, 2025; investigation and data review concluded July 6, 2026. Notified HHS OCR of PHI breach affecting 49,540 individuals. Additional technical safeguards implemented. recordsAffected 49540; companyConfirmed true.
Root cause
Unauthorized network access; suspicious activity Sep 6 2025; review concluded Jul 6 2026