MalwarePIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
IMX Medical Management Services
bd_6f2f10518da13a8e · schema v1 · pii pii-v1
Full breach record for IMX Medical Management Services →IMX Medical Management Services, Inc. disclosed a security incident discovered on September 1, 2022, involving malware on a single laptop as early as June 2022. A threat actor gained access to IMX systems through October 2022. The incident potentially exposed personal and protected health information of employees, providers, and claimants. IMX took systems offline, engaged in forensic investigation, notified law enforcement, and migrated operations to a new QTC-operated network. Affected individuals were offered two years of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2e2054c4e4e8be0aCalifornia State AGfiled 2023-07-27Verified
- bd_63cfb5515213776eMontana State AGfiled 2023-07-27Verified
- bd_b8ed4b75ca4558a8Vermont State AGfiled 2023-07-27Verified
- bd_127ca3a499b242cdMaine State AGfiled 2023-07-12(15d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/07/IMX-Combined-Individual-Notification-Letters_Employees_Providers_Claimants-TEMPLATE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 27, 2023
- Raw hash
- e5b169b613d1814b240eabf031263165fd2cdf05ad3269871c1bcc1fec6333e3
Reporting entity
- Name
- IMX Medical Management Servicesnorm: imx medical management
Victim entity
- Name
- IMX Medical Management Servicesnorm: imx medical management
Incident
- Discovered
- Sep 1, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 47 weeks(329 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.