Social EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

The Center for Integrative Gut Health

bd_78a9de23b7b8a9bd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 29, 2025

Filed

Apr 23, 2026

To disclose

—

Affected

5state residents only

Confidence

67%

The Center for Integrative Gut Health (CIGH) reported a phishing incident to the Maryland Attorney General on March 24, 2025. On January 29, 2025, CIGH discovered a fraudulent email spoofing their account, leading to unauthorized access to an email account containing patient data. Five Maryland residents were affected. Compromised data included names, DOBs, phone numbers, emails, appointment dates, and potentially medical, credit card, and driver's license information. CIGH engaged outside counsel, implemented MFA, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 29, 2025

Discovered

Apr 23, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident

Name: The Center for Integrative Gut Health
norm: the center for integrative gut health
Domain: centerforintegrativehealth.com

Name: The Center for Integrative Gut Health
norm: the center for integrative gut health
Domain: centerforintegrativehealth.com
Industry: Healthcarellm

Discovered: Jan 29, 2025
Materiality determined: —
Notification sent: Mar 19, 2025
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Retained outside counsel with data privacy expertise to assist with an investigation
Implemented additional security measures to further harden their defenses
Notifying affected individuals
Established a toll-free call center through IDX
Changes made: Engaged outside privacy and data security counsel
Upgraded our email to enhance security
Implemented multi-factor authentication for our system users
Performed an enterprise -wide review of our electronic systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376725.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: ebea3d86288361f198d6f5969a537cf5055b36760449eb4cd713a741397c9cd2

Reporting entityThe Center for Integrative Gut Health

Victim entityThe Center for Integrative Gut Health

Incidentdiscovered Jan 29, 2025

Stated responseRetained outside counsel with data privacy expertise to assist with an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov