Social EngineeringPhishingStolen CredentialsData ExfiltratedPIICREDENTIALSLowContained
American Association of Colleges of Osteopathic Medicine
bd_6ab7b871b501d6bd · schema v1 · pii pii-v1
Full breach record for American Association of Colleges of Osteopathic Medicine →American Association of Colleges of Osteopathic Medicine (AACOM) notified consumers on April 8, 2025, of a data breach discovered on September 26, 2024. Unauthorized access to an employee email account occurred via phishing, leading to the acquisition of certain emails and attachments containing personal information. No evidence of misuse was found. Affected individuals were offered 12-24 months of identity protection services.
Vermont clock✗ VT AG >45 bday28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_0f81799057ac7a06Indiana State AGfiled 2025-04-08Verified
- bd_31778ded704f2f6dIowa State AGfiled 2025-04-08Candidate
- bd_d68c22df129ea118New Hampshire State AGfiled 2025-04-08Verified
- bd_dab067214f98a919Oregon State AGfiled 2025-04-08Verified
Show 3 more filings ↓Show fewer ↑
- bd_e8b87fa5585fb708California State AGfiled 2025-04-08Verified
- bd_ebcca748e75e0a1fMaine State AGfiled 2025-04-08Verified
- bd_f350f7480c2e9683Washington State AGfiled 2025-04-08Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-08-american-association-colleges-osteopathic-medicine-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2025
- Raw hash
- 09c774a550dd632401985e759dec51a23bea6d9b8af75e4d0499d8d86f5b62cb
Reporting entity
- Name
- American Association of Colleges of Osteopathic Medicinenorm: american association of colleges of osteopathic medicine
Victim entity
- Name
- American Association of Colleges of Osteopathic Medicinenorm: american association of colleges of osteopathic medicine
Incident
- Discovered
- Sep 26, 2024
- Materiality determined
- —
- Notification sent
- Apr 8, 2025
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 28 weeks(194 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.