Summary
- Environment: Medical certification board network
- Operational impact: No operational outage established in the reviewed notice
- Financial impact: No incident cost established in the reviewed evidence
- Record status: Developing record. Reviewed October 16, 2026; updated as evidence emerges.
What happened
The American Board of Preventive Medicine confirmed unauthorized access to its network. Its investigation found that files containing personal information were accessed or acquired around March 8–10, 2026. [1]
Impact
Around September 24, ABPM determined through forensic investigation and manual document review that the affected files contained personal information. [1]
The public letter identifies names but omits other recipient-specific fields. It gives no affected-person count. September 24 is the data-review finding, not a confirmed initial detection date.
Timeline
Briefing updated
This briefing was last reviewed and updated on October 16, 2026.
Threat Group & Attack Vector
The reviewed notice does not identify an entry method or responsible group.
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
ABPM secured its internal environment and investigated with external cybersecurity specialists. It offered credit and identity monitoring and said it had no knowledge of misuse resulting from the incident at notice time. [1]