American Association of Colleges of Osteopathic Medicine

American Association of Colleges of Osteopathic Medicine reported a data breach to the Indiana Attorney General. The breach occurred on 2024-09-26 and was reported on 2025-04-08. 1,146 Indiana residents were affected. 67,804 individuals affected in total.

American Association of Colleges of Osteopathic Medicine (AACOM) notified the Iowa Attorney General on April 8, 2025, of a data security incident discovered on September 26, 2024. Unauthorized access to an employee email account resulted in the exposure of names and Social Security numbers for 631 Iowa residents. AACOM engaged forensic experts, secured the email environment, and provided 12 months of credit monitoring and identity protection services to affected individuals.

American Association of Colleges of Osteopathic Medicine (AACOM) notified consumers on April 8, 2025, of a data breach discovered on September 26, 2024. Unauthorized access to an employee email account occurred via phishing, leading to the acquisition of certain emails and attachments containing personal information. No evidence of misuse was found. Affected individuals were offered 12-24 months of identity protection services.

American Association of Colleges of Osteopathic Medicine (AACOM) notified Nebraska AG of a data security incident discovered on September 26, 2024, involving unauthorized access to an employee email account. The incident potentially exposed names and Social Security numbers of 288 Nebraska residents. AACOM engaged forensic experts, secured its email environment, and provided 12 months of complimentary credit monitoring and identity protection services to affected individuals.

AACOM notified the NH AG of a data security incident discovered on Sept 26, 2024, involving unauthorized access to an employee email account via phishing. 259 NH residents were affected. AACOM engaged forensic experts, secured its email environment, and provided 12 months of credit monitoring and identity protection services to affected individuals.

American Association of Colleges of Osteopathic Medicine reported a data breach to the Oregon Attorney General. The breach was reported on 2025-04-08. The breach occurred during 9/26/2024 - 9/26/2024. The breach was discovered on 3/31/2025. 67,804 individuals were affected. Notice was sent on 4/8/2025.

American Association of Colleges of Osteopathic Medicine (AACOM) discovered unauthorized access to an employee email account on September 26, 2024. The incident involved potential access to emails and attachments containing personal information. AACOM secured the email environment, engaged independent experts for investigation, and offered identity protection services to affected individuals. No evidence of misuse was found.

American Association of Colleges of Osteopathic Medicine (AACOM) reported an external system breach (hacking) on September 26, 2024, involving unauthorized access to an employee email account. The incident compromised names and Social Security numbers of approximately 67,804 individuals, including 428 Maine residents. Notifications were sent on April 8, 2025, offering 12 months of credit monitoring and identity protection services.

American Association of Colleges of Osteopathic Medicine (AACOM) notified individuals of a data security incident discovered on September 26, 2024, involving unauthorized access to an employee email account. The incident likely exposed personal information of individuals associated with the organization. AACOM engaged forensic experts, secured its email environment, and offered complimentary identity protection services through IDX.

AACOM notified Washington AG of a September 2024 email account compromise affecting 1,740 residents. Personal info (names, DOB, SSN) accessed. Investigation engaged, email secured, and 12-month credit monitoring offered.

AMERICAN ASSOCIATION OF COLLEGES OF OSTEOPATHIC MEDICINE filed a data-breach notice with the Illinois Attorney General in April 2025 (case 25-04-075). The register records the breach as discovered on September 26, 2024. Personal information types reported: drivers license, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.