The Institute for Functional Medicine
bd_352f7809cffc4ce1 · schema v1 · pii pii-v1
Full breach record for The Institute for Functional Medicine →2 incidents on fileThe Institute for Functional Medicine experienced a security incident between May 22 and May 29, 2024, where an attacker used stolen employee credentials to install malicious software on its website. The malware potentially intercepted purchase information, including cardholder details and CVVs, from 289 individuals. The organization removed the malware, reset credentials, and notified law enforcement.
J jump to incidentP pin to compareR raw source
Incident timeline
May 22, 2024
Begins
May 29, 2024
Discovered
Jul 22, 2024
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Vermont State AGbd_1f5b663dae47e0d82024-07-23 · +1dVerified
- Indiana State AGbd_0d3e6c3fca5b01fd2024-06-28 · +24dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Jun 28 (IN), last Jul 23 (VT) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.