Nonprofit Mental Health Provider Breached, Affecting 49,540 Individuals – Names, Social Security Numbers and More Potentially Exposed

A nonprofit mental health provider is disclosing a network intrusion that exposed sensitive personal and health data of nearly 50,000 individuals across the United States.

In a filing with the New Hampshire Attorney General, NFI North says an unauthorized third party gained access to its computer network, impacting 49,540 individuals, including 2,813 New Hampshire residents identified in a supplemental filing.

The firm says the hacker stole files that may contain data, including names, Social Security numbers, other personally identifiable information and protected health information.

“On or about September 6, 2025, NFI North detected a network security incident, in which an unauthorized third-party accessed NFI North’s network environment. NFI North engaged third-party forensic specialists to assist with securing the network environment and investigating the extent of any unauthorized activity. The forensic investigation determined that certain files may have been accessed without authorization. NFI North then undertook a comprehensive review of the data potentially impacted in this incident to determine whether personal information may have been involved.”

The organization says it notified the FBI and rebuilt affected systems, while offering 12 months of free credit monitoring, credit report and credit score services through Cyberscout.

NFI North says no evidence of identity theft or data misuse has been reported.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Generated Image: Midjourney