Clustered 8 filings across 8 jurisdictions · filed Apr 8, 2025. View entity profile → Other incidents for this victim →
incident inc_d3cfd18a0c1243e7 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA IA IN ME NH OR VT WA
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
8 filings across 8 jurisdictions · Apr 8, 2025 · 3 milestones
Sep 26, 2024
When the intrusion reportedly occurred, per the linked filings
Sep 26, 2024
Reported by VERMONT AG, NEW HAMPSHIRE AG, CALIFORNIA AG, WASHINGTON AG filings
Mar 31, 2025
Reported by OREGON AG, MAINE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
American Association of Colleges of Osteopathic Medicine reported a data breach to the Indiana Attorney General. The breach occurred on 2024-09-26 and was reported on 2025-04-08. 1,146 Indiana residents were affected. 67,804 individuals affected in total.
Affected (this filing): 67,804
American Association of Colleges of Osteopathic Medicine, a education sector entity reported a data breach to the Iowa Attorney General. The breach was reported on 2025-04-08.
American Association of Colleges of Osteopathic Medicine (AACOM) notified consumers on April 8, 2025, of a data breach discovered on September 26, 2024. Unauthorized access to an employee email account occurred via phishing, leading to the acquisition of certain emails and attachments containing personal information. No evidence of misuse was found. Affected individuals were offered 12-24 months of identity protection services.
AACOM notified the NH AG of a data security incident discovered on Sept 26, 2024, involving unauthorized access to an employee email account via phishing. 259 NH residents were affected. AACOM engaged forensic experts, secured its email environment, and provided 12 months of credit monitoring and identity protection services to affected individuals.
Affected (this filing): 259
American Association of Colleges of Osteopathic Medicine reported a data breach to the Oregon Attorney General. The breach was reported on 2025-04-08. The breach occurred during 9/26/2024 - 9/26/2024. The breach was discovered on 3/31/2025. 67,804 individuals were affected. Notice was sent on 4/8/2025.
Affected (this filing): 67,804
American Association of Colleges of Osteopathic Medicine (AACOM) discovered unauthorized access to an employee email account on September 26, 2024. The incident involved potential access to emails and attachments containing personal information. AACOM secured the email environment, engaged independent experts for investigation, and offered identity protection services to affected individuals. No evidence of misuse was found.
An external hacking incident at the American Association of Colleges of Osteopathic Medicine on September 26, 2024, resulted in a data breach affecting 428 Maine residents. The breach was discovered on March 31, 2025, and affected individuals were notified on April 8, 2025. The organization offered credit monitoring and identity protection services in response.
Affected (this filing): 428
American Association of Colleges of Osteopathic Medicine, a education sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2024-09-26 and filed notice on 2025-04-08. 1,740 Washington residents were affected. 194 days elapsed between awareness and notification. -186 days to identify the breach. 186 days to contain the breach.
Affected (this filing): 1,740