DisclosureLens
HackingHealthcareProfessional ServicesHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)CredentialsLowContained

American College of Emergency Physicians

bd_5f96d4f3a8610880 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 7, 2020

Filed

Apr 9, 2021

To disclose

31 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

64%
Full breach record for American College of Emergency Physicians →4 incidents on file

American College of Emergency Physicians (ACEP) notified the California AG of a potential data breach. On September 7, 2020, ACEP discovered unusual activity and found that credentials to SQL database servers were stored on a compromised server. The information was at risk between April 8, 2020, and September 21, 2020. Affected data may include names and other personal information. ACEP rebuilt the server, changed passwords, and offered 12 months of credit monitoring.

Incident timeline

undetected · 152 days
discovery → filing · 31 weeks / 214 days

Apr 8, 2020

Begins

Sep 7, 2020

Discovered

Apr 9, 2021

Filed

vs. sector median

+21 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 7d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Washington State AGApr 9 · first
Montana State AGApr 9 · first
Maine State AGApr 9 · first
Oregon State AGApr 9 · first
California State AGApr 9 · first · this page

Pattern: first filing Apr 9 (WA), last Apr 16 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.