Institute for Functional Medicine

The Maine Office of the Attorney General reported that the Institute for Functional Medicine (IFM) experienced a data breach caused by external hacking that occurred between May 22 and May 29, 2024, affecting 289 individuals. The breach involved compromised personal information including cardholder names, addresses, phone numbers, card numbers, expiration dates, and CVVs.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4600d1c1-badb-4092-bf6b-5d5c574cdeec.html

TPRM report: https://www.rankiteo.com/company/institute-for-functional-medicine

"id": "ins338072725",
"linkid": "institute-for-functional-medicine",
"type": "Breach",
"date": "5/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 289,
                        'industry': 'Healthcare',
                        'name': 'Institute for Functional Medicine',
                        'type': 'Organization'}],
 'attack_vector': 'External Hacking',
 'data_breach': {'number_of_records_exposed': 289,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['cardholder names',
                                              'addresses',
                                              'phone numbers',
                                              'card numbers',
                                              'expiration dates',
                                              'CVVs']},
 'date_detected': '2024-05-29',
 'description': 'The Institute for Functional Medicine (IFM) experienced a '
                'data breach caused by external hacking that occurred between '
                'May 22 and May 29, 2024, affecting 289 individuals. The '
                'breach involved compromised personal information including '
                'cardholder names, addresses, phone numbers, card numbers, '
                'expiration dates, and CVVs.',
 'impact': {'data_compromised': ['cardholder names',
                                 'addresses',
                                 'phone numbers',
                                 'card numbers',
                                 'expiration dates',
                                 'CVVs'],
            'payment_information_risk': True},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'title': 'Data Breach at Institute for Functional Medicine',
 'type': 'Data Breach'}