The Institute for Functional Medicine
bd_1f5b663dae47e0d8 · schema v1 · pii pii-v1
Full breach record for The Institute for Functional Medicine →2 incidents on fileThe Institute for Functional Medicine experienced a data breach between May 22-29, 2024, where an attacker used stolen employee credentials to install malicious software on its website. The malware potentially intercepted purchase information, including credit card details and personal data, from customers who made purchases during that window. IFM removed the malware, reset credentials, and notified law enforcement.
J jump to incidentP pin to compareR raw source
Incident timeline
May 22, 2024
Begins
May 29, 2024
Discovered
Jul 23, 2024
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Maine State AGbd_352f7809cffc4ce12024-07-22 · +1dCandidate
- Indiana State AGbd_0d3e6c3fca5b01fd2024-06-28 · +25dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Jun 28 (IN), last Jul 23 (VT) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.