The American Board of Preventive Medicine

American Board of Preventive Medicine (ABPM) notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 81 NH residents. Unauthorized access occurred March 8-10, 2026; discovered September 24, 2026. Compromised data included names, SSNs, bank account info, and credentials. ABPM engaged forensic investigators, notified residents starting October 12, 2026, and offered one year of credit monitoring.

American Board of Preventive Medicine based in Chicago, Illinois, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-09-24 and reported on 2026-10-16. 955 Texas residents were affected. 23,692 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

American Board of Preventative Medicine reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-14. The reporting organization type is Other Commercial. 352 Vermont residents were affected. Categories of data breached: Social Security Numbers.

American Board of Preventive Medicine notified the California AG of a cybersecurity incident where an unauthorized actor accessed its network between March 8 and March 10, 2026. The organization discovered on September 24, 2026, that certain electronic files contained personal information, specifically full names. The incident is contained. The organization engaged external cybersecurity professionals and is offering credit monitoring and identity theft recovery services to affected individuals.

American Board of Preventive Medicine (ABPM) notified individuals that an unauthorized actor gained access to its network environment between March 8 and March 10, 2026. Following a forensic investigation and manual document review, ABPM determined on September 24, 2026, that certain electronic files containing personal information (full name) had been accessed or acquired. ABPM secured its internal environment, engaged external cybersecurity professionals, and is offering complimentary credit monitoring, identity theft recovery services, and insurance reimbursement to affected individuals.

American Board of Preventive Medicine (ABPM) notified Massachusetts residents of a cybersecurity incident where an unauthorized actor gained access to its network. An extensive forensic investigation and manual document review concluded on or about September 24, 2026, that certain electronic files contained personal information, including full names. The specific scope of other data types (e.g., SSN, health records) was redacted in the provided text, but the letter advises protecting medical information, implying PHI involvement. ABPM secured its environment, engaged external cybersecurity professionals, and is offering credit monitoring and identity theft recovery services. The incident is considered contained.

A healthcare certification organization.