HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
American Board of Internal Medicine
bd_3505d0ffe9192f4d · schema v1 · pii pii-v1
Full breach record for American Board of Internal Medicine →The American Board of Internal Medicine experienced an external system breach (hacking) on May 30, 2023, discovered on May 31, 2023. The incident affected 13,361 individuals nationwide, including 30 Maine residents. Personal information, specifically names combined with Social Security Numbers, was acquired by the unauthorized actor. The organization provided written notification on July 25, 2023, and offered one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through IDX.
Maine clockDiscovered May 31, 2023 → Filed with AG Jul 25, 202355d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_155d60c8e451be00New Hampshire State AGfiled 2023-07-25Verified
- bd_9198b2a7adf48099California State AGfiled 2023-07-25Candidate
- bd_bfd56a6f20eb5a4fMontana State AGfiled 2023-07-25Verified
- bd_e43308feb24723b9Vermont State AGfiled 2023-07-25Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c95c2379-ef3c-4322-a115-b732e4a02520.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2023
- Raw hash
- 16c841e6c66e1ae8b12e926eb5d918ebe054fecb0cffa4a046194363ea3db390
Reporting entity
- Name
- American Board of Internal Medicinenorm: american board of internal medicine
Victim entity
- Name
- American Board of Internal Medicinenorm: american board of internal medicine
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- Jul 25, 2023
- Affected individuals
- 13,361
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- ME AG >30d · 55d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 31, 2023→ Filed with AG: Jul 25, 202355d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.