IMX Medical Management Services
bd_b8ed4b75ca4558a8 · schema v1 · pii pii-v1
Full breach record for IMX Medical Management Services →2 incidents on fileIMX Medical Management Services, Inc. disclosed a security incident discovered on September 1, 2022, involving malware on a laptop as early as June 2022. The threat actor accessed certain IMX systems and devices through October 2022, gaining access to email bodies and server folders containing personal and protected health information of claimants. IMX took systems offline, engaged in forensic investigation, and notified law enforcement. The company established a new network via parent company QTC Management, Inc., and offered two years of credit monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 1, 2022
Begins
Sep 1, 2022
Discovered
Jul 27, 2023
Filed
vs. sector median
+35 wks slower
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- California State AGbd_2e2054c4e4e8be0a2023-07-27Verified
- Montana State AGbd_63cfb5515213776e2023-07-27Verified
- Delaware State AGbd_6f2f10518da13a8e2023-07-27Verified
- Massachusetts State AGbd_79529e53ce0a6f152023-07-27Verified
Show 3 more filings ↓Show fewer ↑up to 15d gap
- New Hampshire State AGbd_2039841cea4fcf642023-08-01 · +5dVerified
- Indiana State AGbd_7f546ee3ced3d52d2023-07-21 · +6dVerified
- Maine State AGbd_127ca3a499b242cd2023-07-12 · +15dCandidate
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Jul 12 (ME), last Aug 1 (NH) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.