HackingEducationEducationStolen CredentialsData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

National Board of Osteopathic Medical Examiners

bd_75b39c20f239ef8e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 14, 2023

Filed

Jan 31, 2024

To disclose

50 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

66%

Full breach record for National Board of Osteopathic Medical Examiners →

National Board of Osteopathic Medical Examiners (NBOME) disclosed a security incident occurring Feb 4-13, 2023, discovered Feb 14, 2023. Unauthorized access to systems containing personal information (names, SSNs, financial account numbers) was confirmed. NBOME engaged external cybersecurity professionals and is offering Equifax Credit Watch Gold to affected individuals. No evidence of identity theft found.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday50 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 50 weeks / 351 days

Feb 4, 2023

Begins

Feb 14, 2023

Discovered

Jan 31, 2024

Filed

vs. sector median

+42 wks slower

This filing is one of 10 about the same incident.View merged incident

A leak claim by karakurt about this victim predates this filing by 317 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekarakurtbd_8dcc204e34d959b52023-03-20 · +317dVerified by operator

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_072be9c8b637d2482024-01-31Verified
Delaware State AGbd_97f61d41d69067352024-01-31Verified
Indiana State AGbd_c1a6332934ee30f22024-01-31Verified
Montana State AGbd_c66599feff026cb42024-01-31Verified

Show 4 more filings ↓up to 30d gap

Massachusetts State AGbd_e684eed330a25cf42024-02-01 · +1dVerified
New Hampshire State AGbd_5261055d9e9907ed2024-02-05 · +5dVerified
Delaware State AGbd_3973965fd8d8e03f2024-01-04 · +27dVerified
Illinois State AGbd_ca83c4a97d2da3962024-01-01 · +30dCandidate

Name: National Board of Osteopathic Medical Examiners
norm: national board of osteopathic medical examiners
Domain: nbome.org

Name: National Board of Osteopathic Medical Examiners
norm: national board of osteopathic medical examiners
Domain: nbome.org
Industry: Educationllm

Discovered: Feb 14, 2023
Breach occurred: Feb 4, 2023 – Feb 13, 2023
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 31, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Providing access to Equifax Credit Watch Gold
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 50 weeks(351 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Delaware State AG+3d

Maine State AG+30d

Delaware State AG+30d

Indiana State AG+30d

Montana State AG+30d

Vermont State AG+30d · this page

Massachusetts State AG+31d

New Hampshire State AG+35d

Pattern: first filing Jan 1 (IL), last Feb 5 (NH) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-01-31-national-board-osteopathic-medical-examiners-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2024
Raw hash: 5af4c64d509c768e001a5377a3ad93fdf2a2d48f2b38174a4d928af50b3a577d

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityNational Board of Osteopathic Medical Examiners

Victim entityNational Board of Osteopathic Medical Examiners

Incidentdiscovered Feb 14, 2023

Stated responseCommenced a prompt and thorough investigation

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov