Advanced Health Media (AHM), a subsidiary of IQVIA, suffered an external system breach where unauthorized actors gained access to sensitive personal information. The incident began on November 27, 2022, but was only detected on December 16, 2022. The breach impacted 26,932 individuals, including 64 Maine residents, with compromised data potentially including driver’s license numbers a highly sensitive form of personally identifiable information (PII). As a healthcare-related entity, AHM handles data subject to strict regulatory protections (e.g., HIPAA in the U.S.). The exposure of driver’s license numbers increases risks of identity theft, financial fraud, and targeted phishing attacks against affected individuals. While the article does not specify whether the breach led to direct financial losses or operational disruptions for AHM, the scale and nature of the exposed data suggest significant reputational harm and potential legal liabilities, including regulatory fines or class-action lawsuits. The breach underscores vulnerabilities in AHM’s cybersecurity defenses, particularly in detecting and mitigating unauthorized access over an extended period (19 days). The incident aligns with broader trends in healthcare cyber threats, where third-party vendors (like AHM) often become entry points for attackers targeting larger parent companies (IQVIA) or their clients.
TPRM report: https://www.rankiteo.com/company/advanced-health-media-ahm-
"id": "adv031090625",
"linkid": "advanced-health-media-ahm-",
"type": "Breach",
"date": "11/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 26932,
'industry': 'Healthcare / Pharmaceutical Services',
'name': 'Advanced Health Media (AHM)',
'type': 'Subsidiary'},
{'industry': 'Healthcare / Pharmaceutical Services',
'name': 'IQVIA',
'type': 'Parent Company'}],
'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
'number_of_records_exposed': 26932,
'personally_identifiable_information': ["Driver's license "
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2022-12-16',
'description': 'The Maine Office of the Attorney General reported that '
'Advanced Health Media (AHM), an IQVIA company, experienced an '
'external system breach involving unauthorized access to '
'personal information beginning on November 27, 2022. The '
'breach was discovered on December 16, 2022, and approximately '
'26,932 individuals were affected, including 64 residents of '
'Maine. The compromised information may have included '
"individuals' driver's license numbers.",
'impact': {'data_compromised': ["Driver's license numbers"],
'identity_theft_risk': "High (due to exposure of driver's license "
'numbers)'},
'initial_access_broker': {'high_value_targets': ['Personal information (e.g., '
"driver's license numbers)"]},
'investigation_status': 'Discovered (2022-12-16); ongoing or unresolved '
'status unclear',
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'title': 'Advanced Health Media (AHM) External System Breach',
'type': 'Data Breach'}