The American Board of Preventive Medicine
bd_dd1d827b1ee8f6fe · schema v1 · pii pii-v2
Full breach record for The American Board of Preventive Medicine →American Board of Preventive Medicine (ABPM) notified Massachusetts residents of a cybersecurity incident where an unauthorized actor gained access to its network. An extensive forensic investigation and manual document review concluded on or about September 24, 2026, that certain electronic files contained personal information, including full names. The specific scope of other data types (e.g., SSN, health records) was redacted in the provided text, but the letter advises protecting medical information, implying PHI involvement. ABPM secured its environment, engaged external cybersecurity professionals, and is offering credit monitoring and identity theft recovery services. The incident is considered contained.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Oct 1, 2026
Filed
No interval is drawn: no breach start or discovery date is on record for this filing.
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitegenesisbd_525180baa6721fd12026-05-08 · +146dVerified by operator
Regulatory filings (5) · sorted by filing gap
- Delaware State AGbd_68e61d4ddd463f1e2026-10-12 · +11dVerified
- California State AGbd_be82b2d19b5c9f8b2026-10-13 · +12dVerified by operator
- Vermont State AGbd_ca882183e38bd48c2026-10-14 · +13dVerified by operator
- Texas State AGbd_aba6f948be0fb53c2026-10-16 · +15dVerified by operator
Show 1 more filing ↓Show fewer ↑up to 18d gap
- New Hampshire State AGbd_837431cb7b15f1772026-10-19 · +18dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Oct 1 (MA), last Oct 19 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.