HackingStolen CredentialsCapture Stored DataData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
MODERNIZING MEDICINE, INC.
bd_c36ba25d833c5f47 · schema v1 · pii pii-v1
Full breach record for MODERNIZING MEDICINE, INC. →Modernizing Medicine, Inc. (ModMed) disclosed a data breach affecting podiatry providers and patients. Unauthorized access occurred July 9-10, 2025, involving personal, health, and government ID data. ModMed engaged forensic investigators and law enforcement, enhanced security controls, and offered credit monitoring. No financial account data was compromised.
Vermont clock✗ VT AG >45 bday13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_41a66f90c4f17ac9Montana State AGfiled 2025-10-17Verified
- bd_8d8ff5df36700b16New Hampshire State AGfiled 2025-10-17Verified
- bd_b8f2ce7daeca6541HHS OCRfiled 2025-10-17Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-17-modernizing-medicine-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 17, 2025
- Raw hash
- 0cc2bcaf87c9762316acd8df419caf5c8b376e684bd8cd12d240485e18d30634
Reporting entity
- Name
- MODERNIZING MEDICINE, INC.norm: modernizing medicine
Victim entity
- Name
- MODERNIZING MEDICINE, INC.norm: modernizing medicine
Incident
- Discovered
- Jul 21, 2025
- Materiality determined
- —
- Notification sent
- Oct 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.