type: incident · created: 2026-09-09 · updated: 2026-09-09 · tags: [incident, breach, healthcare, hipaa, the-gentlemen] · confidence: medium · affected_sectors: [healthcare] · au_impact: false
NFI North Data Breach Affects Almost 50,000 Individuals
HIPAA Journal aggregates four new US healthcare breach notifications, the largest being NFI North, a New Hampshire human-services nonprofit, which notified HHS OCR of a breach of 49,540 individuals' protected health information (names, dates of birth, Social Security numbers, driver's licence and financial and medical data), with suspicious activity first seen around 6 September 2025.
| Attribute | Detail |
|---|---|
| NFI North | 49,540 individuals (HHS OCR) |
| Nephrology Associates | 24,088-person incident (Jan–Apr 2026), network intrusion attributed to The Gentlemen |
| Hawaii union health fund | 8,319 people (email account access) |
| Indico Data Solutions | 4,840 people |
| Source | HIPAA Journal — Tier 2/4 |
The items underscore the slow-moving disclosure and notification cadence in the US healthcare sector, with The Gentlemen group offering Nephrology Associates data for sale.
Related Pages
- The Gentlemen — group linked to the Nephrology Associates intrusion