American College of Emergency Physicians

Supplemental notice from American College of Emergency Physicians (ACEP) regarding a data event where credentials to SQL database servers were stored on a compromised server. Information at risk between April 8, 2020 and September 21, 2020. 12 New Hampshire residents affected. Data included names, SSNs, financial account info, DOB, and hashed passwords. No evidence SQL servers were accessed, but notice provided in abundance of caution. Credit monitoring offered.

American College of Emergency Physicians (ACEP) notified Washington AG of a cyberattack affecting 4,148 residents. Unauthorized access to a server storing SQL database credentials occurred between April 8 and September 21, 2020. ACEP discovered the incident on September 7, 2020. Data at risk included names, SSNs, financial accounts, and hashed passwords. ACEP rebuilt the server, changed passwords, and offered 12 months of credit monitoring.

American College of Emergency Physicians (ACEP) notified Montana and other states that unauthorized access to its e-commerce site between May 21 and September 22, 2020, potentially exposed payment card data (account numbers, CVVs, expiration dates) and names/addresses. Discovered September 7, 2020. ACEP engaged forensic specialists, disabled transactions, rebuilt servers, and notified processors. No specific count of affected individuals was provided in this filing.

American College of Emergency Physicians (ACEP) notified the California AG of a potential data breach. On September 7, 2020, ACEP discovered unusual activity and found that credentials to SQL database servers were stored on a compromised server. The information was at risk between April 8, 2020, and September 21, 2020. Affected data may include names and other personal information. ACEP rebuilt the server, changed passwords, and offered 12 months of credit monitoring.

American College of Emergency Physicians ("ACEP") reported an external system breach that occurred between April 8, 2020, and September 21, 2020. The breach was discovered on September 7, 2020. The incident affected 70,349 individuals in total, including 808 Maine residents, compromising their names and Social Security numbers. In response, ACEP offered 12 months of credit monitoring and identity restoration services through TransUnion.

American College of Emergency Physicians ("ACEP") reported a data breach to the Oregon Attorney General. The breach was reported on 2021-04-09. The breach occurred during 4/8/2020 - 9/21/2020. The breach was discovered on 9/7/2020. 70,349 individuals were affected. Notice was sent on 4/8/20214/9/2021.

American College of Emergency Physicians (ACEP) notified the New Hampshire Attorney General of a data event affecting 10 NH residents. Unauthorized acquisition of payment card information (account number, expiration, CVV, name, address) occurred via its e-commerce site between May 21 and September 22, 2020. ACEP discovered unusual activity on September 7, 2020, and confirmed the scope on September 24, 2020. Response included engaging forensic specialists, disabling transactions, rebuilding servers, and notifying card brands and processors.

An external system breach at the American College of Emergency Physicians (ACEP) that occurred on May 21, 2020, and was discovered on September 24, 2020, compromised the financial account or credit/debit card numbers (with access codes) of 1,938 individuals, including 16 Maine residents.

American College of Emergency Physicians reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-17. 38 Massachusetts residents were affected. The report records the breach type as electronic.

American College of Emergency Physicians (ACEP) notified individuals of a data incident discovered on September 7, 2020. Unauthorized acquisition of payment card information (account number, expiration, CVV, name, address) occurred between May 21 and September 22, 2020. ACEP engaged forensic specialists, disabled transactions, rebuilt servers, and notified card brands. Notice was sent November 16, 2020.

American College of Emergency Physicians reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-08-11. 8 Massachusetts residents were affected. The report records the breach type as electronic.

American College of Emergency Physicians (ACEP) notified Montana AG of a breach involving third-party vendor ComNet Marketing. On April 23-24, 2016, ComNet suffered ransomware and subsequent unauthorized deletion of NetApp storage volumes. ACEP notified ComNet on June 23, 2016. Personal info (name, address, payment info) may have been accessed. No evidence of data theft found, but unauthorized access cannot be ruled out. ACEP offered 12 months of credit monitoring.