HackingHealthcareProfessional ServicesHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)LowContained

The American Board of Preventive Medicine

bd_68e61d4ddd463f1e · schema v1 · pii pii-v2

Severity

Low

Discovered

Sep 24, 2026

Filed

Oct 12, 2026

To disclose

18 days

Affected

Not disclosed

Linked

7 records

Confidence

68%

Full breach record for The American Board of Preventive Medicine →

American Board of Preventive Medicine (ABPM) notified individuals that an unauthorized actor gained access to its network environment between March 8 and March 10, 2026. Following a forensic investigation and manual document review, ABPM determined on September 24, 2026, that certain electronic files containing personal information (full name) had been accessed or acquired. ABPM secured its internal environment, engaged external cybersecurity professionals, and is offering complimentary credit monitoring, identity theft recovery services, and insurance reimbursement to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d18 days discovery → filing

Incident timeline

undetected · 200 days

discovery → filing · 18 days

Mar 8, 2026

Begins

Sep 24, 2026

Discovered

Oct 12, 2026

Filed

vs. sector median

6 wks faster

This filing is one of 7 records about the same incident.View merged incident

A leak claim by genesis about this victim was first seen 156 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitegenesisbd_525180baa6721fd12026-05-08 · +157dVerified by operator

Regulatory filings (5) · sorted by filing gap

California State AGbd_be82b2d19b5c9f8b2026-10-13 · +1dVerified by operator
Vermont State AGbd_ca882183e38bd48c2026-10-14 · +2dVerified by operator
Texas State AGbd_aba6f948be0fb53c2026-10-16 · +4dVerified by operator
New Hampshire State AGbd_837431cb7b15f1772026-10-19 · +7dVerified by operator

Show 1 more filing ↓up to 11d gap

Massachusetts State AGbd_dd1d827b1ee8f6fe2026-10-01 · +11dVerified by operator

Name: The American Board of Preventive Medicine
norm: the american board of preventive medicine
Domain: theabpm.org

Name: The American Board of Preventive Medicine
norm: the american board of preventive medicine
Domain: theabpm.org
Industry: HealthcarellmProfessional Servicesllm

Discovered: Sep 24, 2026
Breach occurred: Mar 8, 2026 – Mar 10, 2026
Undetected for: 200 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Worked to secure our internal environment
Commenced a prompt and thorough investigation into the incident
Worked very closely with external cybersecurity professionals experienced in handling these types of situations
Conducted an extensive forensic investigation and complex manual document review
Changes made: Offering complimentary access to IDX Credit and CyberScan monitoring
Offering a $1,000,000 insurance reimbursement policy
Offering fully managed id theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGOct 1 · first

Delaware State AG+11d · this page

California State AG+12d

Vermont State AG+13d

Texas State AG+15d

New Hampshire State AG+18d

Pattern: first filing Oct 1 (MA), last Oct 19 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/10/ABPM_Letter_A_-_Adult_CM39926523.1_v2__Static_Proof_R240256146.1_Redacted_40290666v1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 12, 2026
Raw hash: 1e712780ddd1c85ed5bdee14153d6b4da1377c9266851e78a98c5fced965a277

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityThe American Board of Preventive Medicine

Victim entityThe American Board of Preventive Medicine

Incidentdiscovered Sep 24, 2026

Stated responseWorked to secure our internal environment

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov