ACE Surgical Supply Co., Inc.

ACE Surgical Supply Co., Inc. disclosed a cyberattack where unauthorized access occurred between June 29 and July 8, 2021. The company discovered the incident on June 29, 2021. Affected data included names, contact information, DEA numbers, and physician state license numbers. The company secured systems, contacted law enforcement, and offered 24 months of identity monitoring.

ACE Surgical Supply Co., Inc. experienced an external system breach on June 29, 2021, which was also the date of discovery. The breach compromised financial account numbers or credit/debit card numbers along with personal identifiers. A total of 67 Maine residents were affected. The company began notifying consumers on July 26, 2021, and offered 24 months of complimentary identity theft protection services through Experian's IdentityWorks.

On June 29, 2021, ACE Surgical Supply Co., Inc. discovered it was the victim of a ransomware cyberattack in which company files were accessed without authorization. The company secured its systems, contacted the FBI, and began an investigation. An initial notification was sent on July 28, 2021, to three affected Maine residents. In September 2021, the investigation identified an additional 25 affected customers who are Maine residents. The compromised customer information included names, contact information, and DEA and physician state license numbers. A second round of written notifications, including an offer for credit monitoring services, was sent to affected Maine residents on October 6, 2021. The investigation is ongoing, and there is no evidence that the compromised information has been made public or used for identity theft.

ACE Surgical Supply Co., Inc. filed a supplemental data breach notification with the New Hampshire Attorney General regarding a ransomware attack discovered on June 29, 2021. The incident affected 58 New Hampshire residents, exposing names, contact info, and DEA/physician license numbers. Notifications were sent on October 6, 2021, offering 24 months of credit monitoring. The investigation is ongoing.

ACE Surgical Supply Company, Inc. disclosed a cyberattack discovered on June 29, 2021, where unauthorized parties accessed company files. The breach potentially exposed Assessment Questionnaire Practitioner Forms containing names, contact info, DEA numbers, and state license numbers. The company secured systems, engaged forensic investigators, and notified law enforcement. Affected individuals were offered 24 months of Experian IdentityWorks.

ACE Surgical Supply Co reported a data breach to the Indiana Attorney General. The breach occurred on 2021-06-29 and was reported on 2021-08-25. 130 Indiana residents were affected. 12,122 individuals affected in total.

ACE Surgical Supply Co., Inc. reported an external system breach (hacking) occurring on June 29, 2021. The incident compromised the names and Social Security Numbers of 284 individuals, including 3 Maine residents. The company notified affected consumers in writing on July 26, 2021, and provided 24 months of complimentary identity protection services through Experian.

ACE Surgical Supply Co., Inc. notified the New Hampshire Attorney General on July 28, 2021, of a ransomware incident discovered on June 29, 2021. The breach affected 3 New Hampshire residents, exposing employee and dependent PII including SSNs, DOBs, and bank account details. ACE engaged the FBI and forensic investigators, secured systems, and provided 24 months of credit monitoring.

ACE Surgical Supply Co., Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-08. 1,217 Massachusetts residents were affected. The report records the breach type as electronic.

ACE Surgical Supply Co., Inc. notified the NH Attorney General that an information security incident possibly involved 13 NH residents. Suspicious files were discovered during a routine server review. Credit card info and/or account passwords were compromised. Notifications were mailed on Sept 4, 2015, with 1 year of identity monitoring offered.