Operation PAR, Boley Centers, and PEMHS (doing business as Eleos) have reported a cybersecurity incident potentially impacting the personal and health information of 65 New Hampshire residents. While there is no evidence that the information has been misused, affected individuals are being provided resources to safeguard their data.
Operation PAR, Boley, and Eleos Data Breach Investigation
On or about June 10, 2025, the organizations detected unauthorized access to their network. Upon discovery, they immediately secured systems and engaged external cybersecurity experts to investigate the scope of the incident. The investigation determined that files may have been accessed or removed between June 6 and June 10, 2025.
After extensive forensic review, it was confirmed on June 10, 2026 that impacted systems contained personal and health information for New Hampshire residents. No misuse of data has been reported, but the organizations are taking precautionary measures and notifying affected individuals.
The organizations have enhanced network security, implemented additional safeguards recommended by cybersecurity professionals, and continue to monitor for suspicious activity.
When Did This Breach Occur?
Unauthorized access occurred between June 6 and June 10, 2025, with discovery on June 10, 2025. Notifications to affected individuals were issued on or about June 25, 2026.
What Information Was Breached?
Potentially impacted information may include:
- Full name
- Date of birth
- Social Security number
- Driver’s license number
- Health insurance information
- Medical information
The exact combination of compromised data may vary per individual.
What You Can Do
Affected individuals should take proactive steps to protect themselves:
- Enroll in Complimentary Credit Monitoring: Epiq Privacy Solutions offers 12 months of credit monitoring with alerts, dark web monitoring, credit protection, change-of-address monitoring, and identity restoration assistance. Enroll at www.privacysolutionsid.com using the activation code provided in the notice.
- Monitor Accounts: Regularly review bank statements, credit reports, and health-related accounts for irregular activity.
- Obtain Free Credit Reports: Request free annual credit reports from Equifax, Experian, and TransUnion via www.annualcreditreport.com or 1-877-322-8228.
- Place Fraud Alerts or Security Freezes: Contact the credit bureaus to add a 1-year or extended 7-year fraud alert or place a security freeze.
- Report Suspicious Activity: Notify law enforcement, state Attorney General offices, or the Federal Trade Commission at www.ftc.gov/idtheft if misuse is suspected.
State-specific guidance is available for residents of Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, and Washington D.C..
File a Data Breach Lawsuit Against Operation PAR, Boley, and Eleos
Organizations entrusted with sensitive personal and health information have a legal duty to protect that data. When unauthorized access occurs, affected individuals may have legal options to seek compensation for time spent mitigating risks, monitoring accounts, and other damages.
If you received notice from Operation PAR, Boley, or Eleos, or suspect your personal information was exposed, you may explore class action legal remedies. Joining with other impacted individuals can hold the organizations accountable and encourage stronger data protection measures in the future.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
