IMX Medical Management Services
bd_6f2f10518da13a8e · schema v1 · pii pii-v1
Full breach record for IMX Medical Management Services →2 incidents on fileIMX Medical Management Services, Inc. disclosed a security incident discovered on September 1, 2022, involving malware on a single laptop as early as June 2022. A threat actor gained access to IMX systems through October 2022. The incident potentially exposed personal and protected health information of employees, providers, and claimants. IMX took systems offline, engaged in forensic investigation, notified law enforcement, and migrated operations to a new QTC-operated network. Affected individuals were offered two years of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 1, 2022
Begins
Sep 1, 2022
Discovered
Jul 27, 2023
Filed
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- California State AGbd_2e2054c4e4e8be0a2023-07-27Verified
- Montana State AGbd_63cfb5515213776e2023-07-27Verified
- Massachusetts State AGbd_79529e53ce0a6f152023-07-27Verified
- Vermont State AGbd_b8ed4b75ca4558a82023-07-27Verified
Show 3 more filings ↓Show fewer ↑up to 15d gap
- New Hampshire State AGbd_2039841cea4fcf642023-08-01 · +5dVerified
- Indiana State AGbd_7f546ee3ced3d52d2023-07-21 · +6dVerified
- Maine State AGbd_127ca3a499b242cd2023-07-12 · +15dCandidate
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jul 12 (ME), last Aug 1 (NH) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.