Garten Reports Data Breach Affecting Sensitive Personal and Health Information
Garten, a New Hampshire-based organization, disclosed a data breach to the state’s Attorney General after detecting suspicious activity within its network on August 2, 2025. Following an investigation, Garten confirmed that an unauthorized third party may have accessed or acquired sensitive personal and protected health information stored in its systems.
The breach potentially exposed a range of data, including names, Social Security numbers, driver’s license details, and medical records. The scope of affected information varied by individual. After completing a review on December 4, 2025, Garten began notifying impacted individuals via mail, providing details on the specific data compromised and offering 12 months of complimentary credit monitoring services.
The incident highlights ongoing risks to personal and health-related data in digital environments. Garten’s breach notice, filed with the New Hampshire Attorney General, outlines the timeline and response measures taken.
Source: https://straussborrelli.com/2026/01/09/garten-services-data-breach-investigation/
Garten cybersecurity rating report: https://www.rankiteo.com/company/garten
"id": "GAR1768001684",
"linkid": "garten",
"type": "Breach",
"date": "8/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Individuals with sensitive '
'information exposed',
'location': 'New Hampshire, USA',
'name': 'Garten',
'type': 'Organization'}],
'customer_advisories': '12 months of complimentary credit monitoring services '
'offered to affected individuals',
'data_breach': {'personally_identifiable_information': ['Name',
'Social Security '
'number',
'Driver’s license '
'information',
'Medical records'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information',
'Protected Health Information']},
'date_detected': '2025-08-02',
'date_publicly_disclosed': '2025-12-04',
'description': 'Garten reported a data breach where sensitive personal '
'identifiable information and protected health information may '
'have been compromised. The breach was detected on August 2, '
'2025, and an investigation confirmed unauthorized access to '
'sensitive data. The review of impacted data was completed on '
'December 4, 2025, and affected individuals were notified with '
'complimentary credit monitoring services.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'and protected health information',
'identity_theft_risk': 'High'},
'investigation_status': 'Completed',
'references': [{'source': 'Breach notice filed with the Attorney General of '
'New Hampshire'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
'Attorney General of '
'New Hampshire'},
'response': {'communication_strategy': 'Data breach notification letters '
'mailed to impacted individuals'},
'threat_actor': 'Unauthorized third party',
'title': 'Garten Data Breach - Unauthorized Access to Sensitive Information',
'type': 'Data Breach'}