Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Central Coast Center for Integrative Health
bd_78a9de23b7b8a9bd · schema v1 · pii pii-v1
Full breach record for Central Coast Center for Integrative Health →The Center for Integrative Gut Health (CIGH) reported a phishing incident to the Maryland Attorney General on March 24, 2025. On January 29, 2025, CIGH discovered a fraudulent email spoofing their account, leading to unauthorized access to an email account containing patient data. Five Maryland residents were affected. Compromised data included names, DOBs, phone numbers, emails, appointment dates, and potentially medical, credit card, and driver's license information. CIGH engaged outside counsel, implemented MFA, and offered 12 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376725.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2026
- Raw hash
- ebea3d86288361f198d6f5969a537cf5055b36760449eb4cd713a741397c9cd2
Reporting entity
- Name
- Central Coast Center for Integrative Healthnorm: central coast center for integrative health
- Domain
- centerforintegrativehealth.com
Victim entity
- Name
- Central Coast Center for Integrative Healthnorm: central coast center for integrative health
- Domain
- centerforintegrativehealth.com
Incident
- Discovered
- Jan 29, 2025
- Materiality determined
- —
- Notification sent
- Mar 19, 2025
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 months(449 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.