ACE Surgical Supply Co., Inc.

ACE Surgical Supply Co., Inc. disclosed a cyberattack where unauthorized access occurred between June 29 and July 8, 2021. The company discovered the incident on June 29, 2021. Affected data included names, contact information, DEA numbers, and physician state license numbers. The company secured systems, contacted law enforcement, and offered 24 months of identity monitoring.

ACE Surgical Supply Co., Inc. experienced an external system breach on June 29, 2021, which was also the date of discovery. The breach compromised financial account numbers or credit/debit card numbers along with personal identifiers. A total of 67 Maine residents were affected. The company began notifying consumers on July 26, 2021, and offered 24 months of complimentary identity theft protection services through Experian's IdentityWorks.

On June 29, 2021, ACE Surgical Supply Co., Inc. discovered it was the victim of a ransomware cyberattack in which company files were accessed without authorization. The company secured its systems, contacted the FBI, and began an investigation. An initial notification was sent on July 28, 2021, to three affected Maine residents. In September 2021, the investigation identified an additional 25 affected customers who are Maine residents. The compromised customer information included names, contact information, and DEA and physician state license numbers. A second round of written notifications, including an offer for credit monitoring services, was sent to affected Maine residents on October 6, 2021. The investigation is ongoing, and there is no evidence that the compromised information has been made public or used for identity theft.

ACE Surgical Supply Co reported a data breach to the Montana Attorney General. The breach was reported on 2021-10-06. The breach occurred on 6/29/2021. 42 Montana residents were affected.

ACE Surgical Supply Co., Inc. reported an external system breach (hacking) occurring on June 29, 2021. The incident compromised the names and Social Security Numbers of 284 individuals, including 3 Maine residents. The company notified affected consumers in writing on July 26, 2021, and provided 24 months of complimentary identity protection services through Experian.