Innovative Scientific Solutions Breach Exposes Personal and Medical Information

Innovative Scientific Solutions LLC, a company in the defense and space industry based in Greenville, South Carolina, has disclosed a data breach involving unauthorized access to its computer network that has so far affected 192 Massachusetts residents and three New Hampshire residents.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation and to the New Hampshire Attorney General. Affected individuals were notified beginning April 7, 2026.

The company determined on March 31, 2026, that personal information had been compromised.

What happened in the Innovative Scientific Solutions data breach

On or around Sept. 6, 2025, an unauthorized third party gained access to Innovative Scientific Solutions' computer network. The incident was detected at that time, and an investigation followed.

A forensic analysis and an extensive manual review of documents in the affected systems determined that files had been potentially removed from the network by the unauthorized actor. Those files contained personal information belonging to certain individuals.

The personally identifiable information (PII) and protected health information (PHI) exposed in this breach included full names, dates of birth, Social Security numbers, health insurance policy numbers and subscriber numbers, medical history, medical records, conditions, treatments and diagnoses, dates of service, telephone numbers and prescription information.

Innovative Scientific Solutions' response to the breach

Innovative Scientific Solutions is offering affected individuals whose Social Security numbers were impacted a complimentary membership to Experian IdentityWorks Credit 3B. The services also include Experian IdentityWorks ExtendCare, which provides identity restoration support even after the membership expires, as well as $1 million in identity theft insurance.

The company has set up a dedicated toll-free response line for questions about the incident. The line is available Monday through Friday from 9 a.m. to 9 p.m. Eastern time.

Steps to take if your information was exposed

• Place a fraud alert or security freeze on credit files by contacting Equifax (1-800-525-6285), Experian (1-888-397-3742) or TransUnion (1-800-680-7289), as this breach involved Social Security numbers that could be used to open fraudulent accounts.
• Review credit reports for unfamiliar accounts or inquiries by requesting free reports at AnnualCreditReport.com or by calling 1-877-322-8228.
• Monitor Explanation of Benefits statements from health insurers for any services not received, since medical records and health insurance information were exposed in this breach.
• Request a year-to-date report of services from health insurance providers and follow up on any unrecognized items, as exposed health insurance policy numbers could be used for medical identity theft.
• Be cautious of phishing attempts that reference Innovative Scientific Solutions or this data breach by name, as scammers may use breach details to trick people into sharing additional personal information.
• Report suspected identity theft to the FTC at ftc.gov/idtheft or by calling 1-877-438-4338 if there are signs that personal information has been misused.