HackingSupply Chain (3P Vendor)IDENTITY_BASICPIILowContained
ALN Medical Management, LLC
bd_26ee976fd78349d6 · schema v1 · pii pii-v1
Full breach record for ALN Medical Management, LLC →ALN Medical Management notified consumers of a data breach involving a third-party service provider. Unauthorized access occurred between March 18-24, 2024, affecting names and PII. ALN isolated the environment, engaged law enforcement, and offered 12-24 months of credit monitoring. No specific total count was disclosed, though 245 Rhode Island residents were identified.
Vermont clock✗ VT AG >45 bday13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_845ac8d93490851fCalifornia State AGfiled 2025-03-21Candidate
- bd_874b92a535bb2b2cNew Hampshire State AGfiled 2025-03-21Verified
- bd_3b44a23e3b496218Montana State AGfiled 2025-04-21(31d gap)Candidate
- bd_328d955c2bb8f071New Hampshire State AGfiled 2025-05-23(63d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 63d gap
- bd_95a74008c0f7575dWashington State AGfiled 2025-05-23(63d gap)Verified
- bd_dc4b4e0126c62d83California State AGfiled 2025-05-23(63d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-21-aln-medical-management-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 21, 2025
- Raw hash
- fa474a9b6928a4be71c2c85e2cb4cfc1f5b2d1d77c1981e4f075a460d161fee9
Reporting entity
- Name
- ALN Medical Management, LLCnorm: aln medical management
Victim entity
- Name
- ALN Medical Management, LLCnorm: aln medical management
Incident
- Discovered
- Mar 1, 2024
- Materiality determined
- —
- Notification sent
- Mar 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported this incident to law enforcement and regulators
- Initial access
- supply_chain
Compliance
- Time to disclose
- 13 months(385 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.