AccidentalMisdeliveryEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
180 MEDICAL, INC.
bd_6ed82345abbc1685 · schema v1 · pii pii-v1
Full breach record for 180 MEDICAL, INC. →180 Medical notified Maryland AG of an isolated data security incident on Feb 18, 2025, where an email containing employee PII (name, address, SSN) was inadvertently sent to an unauthorized party. Two Maryland residents were impacted. The company investigated, contained the incident, and is offering 24 months of credit monitoring via Experian.
Maryland clock✓ MD AG ≤30d6 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_bf5698a7753a7cd7Indiana State AGfiled 2025-02-24Verified
- bd_8c52d342f4d88ddfMaine State AGfiled 2025-02-28(4d gap)Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376411.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2025
- Raw hash
- 8b23f1c6a5f9bd0a0edf4f4576a6c9e60b76c70c194ba87f170d997a4e92a566
Reporting entity
- Name
- HOGAN LOVELLS US LLPnorm: hogan lovells us
Victim entity
- Name
- 180 MEDICAL, INC.norm: 180 medical
Incident
- Discovered
- Feb 18, 2025
- Materiality determined
- —
- Notification sent
- Feb 24, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1566 Phishing
- Regulator citations
- Notified Maryland Office of the Attorney General
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- MD AG ≤30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.