HackingVulnerability ExploitData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
BIOMERIEUX, INC.
bd_0f759e4628b86026 · schema v1 · pii pii-v1
Full breach record for BIOMERIEUX, INC. →The Vitality Group, LLC, filed a data breach notice with the Maine Attorney General regarding an incident involving bioMérieux. The breach, occurring on May 30, 2023, and discovered on June 1, 2023, involved the compromise of third-party software (MOVEit). Approximately 10,244 individuals were affected, including 2 Maine residents. The breach exposed names and Social Security Numbers. The entity provided 24 months of credit monitoring and identity theft insurance through Experian.
Maine clockDiscovered Jun 1, 2023 → Filed with AG Jul 12, 202341d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,244 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b44c74d9-1ffb-4e7a-8b27-32c946297225.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- 3a12b79cd3a09f591f38ea9472862087695658935025981c000d4f2201668aee
Reporting entity
- Name
- Vitality Nutritionnorm: vitality nutrition
- Domain
- vitalitynutrition.com
Victim entity
- Name
- BIOMERIEUX, INC.norm: biomerieux
- Industry
- healthcare
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- Jul 6, 2023
- Affected individuals
- 10,244
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- ME AG >30d · 41d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 1, 2023→ Filed with AG: Jul 12, 202341d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.