The Maine Office of the Attorney General reported on December 26, 2024, that the Massachusetts Medical Society (MMS) experienced a data breach due to unauthorized code installed on its e-commerce website between October 3 and 11, 2024. The breach potentially compromised the personal information of one Maine resident, including payment card data. A total of 246 individuals were affected.
TPRM report: https://www.rankiteo.com/company/massachusetts-medical-society
"id": "mas120072625",
"linkid": "massachusetts-medical-society",
"type": "Breach",
"date": "10/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 246,
'industry': 'Healthcare',
'location': 'Massachusetts',
'name': 'Massachusetts Medical Society',
'type': 'Organization'}],
'attack_vector': 'Unauthorized Code Installation',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 246,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Payment Card Data']},
'date_detected': '2024-10-03',
'date_publicly_disclosed': '2024-12-26',
'description': 'The Maine Office of the Attorney General reported on December '
'26, 2024, that the Massachusetts Medical Society (MMS) '
'experienced a data breach due to unauthorized code installed '
'on its e-commerce website between October 3 and 11, 2024. The '
'breach potentially compromised the personal information of '
'one Maine resident, including payment card data. A total of '
'246 individuals were affected.',
'impact': {'data_compromised': ['Personal Information', 'Payment Card Data'],
'payment_information_risk': True,
'systems_affected': ['E-commerce Website']},
'initial_access_broker': {'entry_point': 'E-commerce Website'},
'references': [{'date_accessed': '2024-12-26',
'source': 'Maine Office of the Attorney General'}],
'title': 'Massachusetts Medical Society Data Breach',
'type': 'Data Breach'}