HackingTargetedIDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNTLowContained
Electrostim Medical Services, Inc.
bd_e539440cd1981aa0 · schema v1 · pii pii-v1
Full breach record for Electrostim Medical Services, Inc. →Electrostim Medical Services, Inc. (EMSI) notified consumers of a data breach where an unknown actor accessed the network between April 27 and May 13, 2023. The incident exposed patient names, contact info, diagnoses, insurance details, and prescribed products. EMSI engaged forensic specialists, notified law enforcement and regulators, and is enhancing security. 555 Rhode Island residents were identified as affected.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d63b1a2fa0b7d75cHHS OCRfiled 2023-12-28Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-28-electrostim-medical-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 28, 2023
- Raw hash
- 60b73ba18c20a59312689e2057b30758db2a6f8737ebd2462c82d68e1605ec05
Reporting entity
- Name
- Electrostim Medical Services, Inc.norm: electrostim medical
Victim entity
- Name
- Electrostim Medical Services, Inc.norm: electrostim medical
Incident
- Discovered
- May 13, 2023
- Materiality determined
- —
- Notification sent
- Dec 28, 2023
- Affected individuals
- 555
- Data types
- IDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified state and industry regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 33 weeks(229 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.