HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
International Society for Heart and Lung Transplantation
bd_e8f353cc8b6fc74c · schema v1 · pii pii-v1
Full breach record for International Society for Heart and Lung Transplantation →The International Society for Heart and Lung Transplantation (ISHLT) notified consumers of a data breach involving its Managed Service Provider (MSP) discovered on October 7, 2024. Unauthorized access may have exposed bank account/routing numbers and names. ISHLT engaged forensic investigators, secured systems, and offered credit monitoring services. No evidence of misuse was found at the time of notification.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-03-international-society-heart-and-lung-transplantation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2025
- Raw hash
- 360b8a4c65c3baf5eeeb18277cebc8df82d4d2044cd7d10928c03d410dc70633
Reporting entity
- Name
- International Society for Heart and Lung Transplantationnorm: international society for heart and lung transplantation
Victim entity
- Name
- International Society for Heart and Lung Transplantationnorm: international society for heart and lung transplantation
Incident
- Discovered
- Oct 7, 2024
- Materiality determined
- —
- Notification sent
- Apr 3, 2025
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Third party
- via Managed Service Provider (MSP)
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 25 weeks(178 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.