DisclosureLens
HackingProfessional ServicesHealthcareProfessional ServicesCustomer Data InvolvedFinancial accountMediumContained

National Board of Osteopathic Medical Examiners

bd_072be9c8b637d248 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 4, 2024

Filed

Jan 31, 2024

To disclose

27 days

Affected · nationwide

4,31024 in this filing

Linked

10 filings

Confidence

50%
Full breach record for National Board of Osteopathic Medical Examiners →

The National Board of Osteopathic Medical Examiners, a non-profit organization, experienced an external system breach (hacking) that occurred from February 4, 2023, to February 13, 2023. The breach was discovered on January 4, 2024. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. A total of 4,310 individuals were affected, including 24 residents of Maine. Affected individuals were notified in writing on January 31, 2024, and offered 12 months of credit monitoring services through Equifax.

Leak gap clock✗ Leak >180d27 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 334 days
discovery → filing · 27 days

Feb 4, 2023

Begins

Jan 4, 2024

Discovered

Jan 31, 2024

Filed

vs. sector median

15 wks faster

This filing is one of 10 about the same incident.View merged incident
A leak claim by karakurt about this victim predates this filing by 317 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 30d gap

Filing propagation · 9 filings · 8 states

View merged incident ↗
Illinois State AGJan 1 · first
Delaware State AG+3d
Vermont State AG+30d
Delaware State AG+30d
Indiana State AG+30d
Montana State AG+30d
Maine State AG+30d · this page
Massachusetts State AG+31d
New Hampshire State AG+35d

Pattern: first filing Jan 1 (IL), last Feb 5 (NH) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.