NFI North data breach compromises sensitive information of nearly 50,000

NFI North, an organisation offering mental health and behavioral care services, said a cyber security breach last year compromsied the confidential personal data of nearly 50,000 people.

 

AHeadquartered in Contoocook, New Hampshire, NFI North is a nonprofit organization dedicated to providing comprehensive mental health, behavioral, and educational support services. The organisation serves children, adults, and families across Maine and New Hampshire, offering a range of programs designed to promote well-being, stability, personal development, and stronger family and community connections.

 

In a data security incident notice filed with the Office of Vermont Attorney General, NFI North said that on September 6, 2025, it identified unauthorised access within its internal network. The organisation immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to contain the incident, secure the affected network and notified relevant law enforcement authorities about the same.

 

“Our preliminary review of the exfiltrated data determined that information related to you may have been impacted by this event on November 5, 2025.

 

“On July 6, 2026, we determined that personal information may have been impacted as the result of unauthorised access to our network environment,” NFI North said.

 

The compromised data included names, dates of birth, addresses, Social Security numbers, driver’s license numbers, financial account information, medical information and health insurance information. The incident was reported to the U.S. Department of Health and Human Services where NFI North said it has identified at least 49,540 individuals impacted by the incident.

 

Following the incident, NFI North rebuilt the affected systems and introduced additional measures to strengthen its network security. The organisation is also reviewing its policies, procedures, security software, and data management practices to further protect its systems and servers. NFI North has notified the FBI and continues to fully cooperate with the investigation.

 

While NFI North found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered complimentary identity protection and credit monitoring services through Cyberscout to all affected individuals.

 

No known threat actor claimed responsibility for the cyber attack at the time of publication. NFI North also did not share details regarding the perpetrators, the exact volume of exfiltrated data, and whether a ransom demand was made.