HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Advanced Health Media (“AHM”), an IQVIA company and notice on behalf of clients of AHM.
bd_381837ffc67ad099 · schema v1 · pii pii-v1
Full breach record for Advanced Health Media (“AHM”), an IQVIA company and notice on behalf of clients of AHM. →Advanced Health Media (AHM), an IQVIA company, reported an external system breach (hacking) occurring on November 27, 2022, discovered on December 16, 2022. The incident affected 26,932 individuals, including 64 Maine residents. Acquired data included names and driver's license numbers. AHM provided 24 months of credit monitoring via Experian IdentityWorks and sent written notifications on February 24, 2023.
Maine clockDiscovered Dec 16, 2022 → Filed with AG Feb 27, 202373d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9986b264bb40dce0California State AGfiled 2023-02-27Candidate
- bd_d0170f40b2acb270Oregon State AGfiled 2023-04-18(50d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/53ec3da6-7a53-4de8-976c-dc02044d77aa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2023
- Raw hash
- 40fecaeadab38364c4ab3e640ebd58252439294319c2bac94cf0bb332aa1dac1
Reporting entity
- Name
- Advanced Health Media (“AHM”), an IQVIA companynorm: advanced health media ahm an iqvia
Victim entity
- Name
- Advanced Health Media (“AHM”), an IQVIA company and notice on behalf of clients of AHM.norm: advanced health media ahm an iqvia company and notice on behalf of clients of ahm
Incident
- Discovered
- Dec 16, 2022
- Materiality determined
- —
- Notification sent
- Feb 24, 2023
- Affected individuals
- 26,932
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- ME AG >30d · 73dME resident >60d · 70d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 16, 2022→ Filed with AG: Feb 27, 202373d 30 days (soft) ME AG >30d Maine Discovered: Dec 16, 2022→ Notified: Feb 24, 202370d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.