HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
IMX Medical Management Services
bd_127ca3a499b242cd · schema v1 · pii pii-v1
Full breach record for IMX Medical Management Services →IMX Medical Management Services reported an external system breach that occurred between June 2022 and October 26, 2022. The breach, discovered on September 1, 2022, affected three Maine residents. The compromised information included names and driver's license or non-driver identification card numbers. IMX offered 24 months of complimentary credit monitoring and identity protection services through Equifax to those affected.
Maine clockDiscovered Sep 1, 2022 → Filed with AG Jul 12, 2023314d ✗ ME AG >90d45 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2e2054c4e4e8be0aCalifornia State AGfiled 2023-07-27(15d gap)Verified
- bd_63cfb5515213776eMontana State AGfiled 2023-07-27(15d gap)Verified
- bd_6f2f10518da13a8eDelaware State AGfiled 2023-07-27(15d gap)Verified
- bd_b8ed4b75ca4558a8Vermont State AGfiled 2023-07-27(15d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7407c47b-6295-432a-a7f8-54afc0133477.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- a390c714d8c7430a5e0d35eebe44874007ffafe9c3e25a41c0d23ba21f0bad9c
Reporting entity
- Name
- IMX Medical Management Servicesnorm: imx medical management
Victim entity
- Name
- IMX Medical Management Servicesnorm: imx medical management
Incident
- Discovered
- Sep 1, 2022
- Materiality determined
- —
- Notification sent
- Jul 27, 2023
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 45 weeks(314 days from discovery to filing)
- Compliance flags
- ME AG >90d · 314dME resident >180d · 329d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 1, 2022→ Filed with AG: Jul 12, 2023314d 90 days ME AG >90d Maine Discovered: Sep 1, 2022→ Notified: Jul 27, 2023329d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.