American Board of Preventative Medicine notified Vermont and California regulators that a data breach exposed Social Security numbers. The exact number of people affected and how the breach occurred have not been publicly disclosed. Anyone who receives a notification letter should place a credit freeze or fraud alert with the major credit bureaus right away.
| Company | American Board of Preventative Medicine |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Social Security Numbers |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | California Attorney General, Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the American Board of Preventative Medicine Data Breach?
American Board of Preventative Medicine recently filed formal notice confirming a data breach involving sensitive personal information. The organization reported the incident to the Vermont Attorney General, officially disclosing it in October 2026. As a result, affected individuals are now being notified that their Social Security numbers may have been compromised.
The notification does not specify exactly how the breach occurred or when the unauthorized access first took place. In addition, the exact discovery date has not been publicly disclosed. This leaves many questions unanswered about the timeline between when intruders may have accessed systems and when the organization became aware of the problem.
Because American Board of Preventative Medicine chose to file notifications with multiple state regulators, it appears the organization has completed at least a preliminary investigation. However, the public record currently available does not detail the forensic findings. Consequently, affected individuals are left relying on the official notice for guidance until more information becomes available.
Who was affected?
The notification does not state a specific number of individuals impacted by this breach. As a result, the full scope remains unclear at this time. Still, the fact that the organization is a medical board focused on preventative medicine certification suggests the affected individuals likely include physicians, medical professionals, or administrative staff connected to the organization.
It is not yet known whether patients, applicants, or only internal personnel were affected. Because the notice was filed in multiple states, including Vermont and California, the impact appears to extend across different parts of the country. This means the breach is not confined to a single region or a narrow group of people.
What Information Was Potentially Exposed?
According to the breach notification, the following category of information was involved in this incident:
- Social Security Numbers
Social Security numbers are among the most sensitive pieces of personal data a person can lose control of. Unlike a password, a Social Security number cannot simply be changed after a breach. Therefore, once this type of data is exposed, it can remain a long-term risk for the people affected.
Criminals often use stolen Social Security numbers to open new credit accounts, file fraudulent tax returns, or apply for loans in someone else’s name. In addition, this type of information can be combined with other leaked data to build a more complete profile for identity theft. Because of this, affected individuals should treat the exposure seriously, even though no other data categories were named in the notification.
What is the company doing?
American Board of Preventative Medicine filed official notification with state regulators after identifying the breach. Specifically, the organization filed with the Vermont Attorney General as well as the California Attorney General. This step indicates the organization is treating the incident as a reportable data security event under applicable state breach notification laws.
Beyond the regulatory filings, the notice does not describe additional remediation steps, such as credit monitoring enrollment or specific security upgrades. Because this information has not been publicly disclosed, affected individuals should watch for a direct notification letter from the organization. That letter will likely include more specific instructions and any available protective services.
What Should Affected Individuals Do?
Place a Fraud Alert or Credit Freeze
Because Social Security numbers were involved in this breach, affected individuals should strongly consider placing a fraud alert or a credit freeze with the three major credit bureaus. A fraud alert makes it harder for someone to open credit in your name, since lenders must take extra verification steps. A credit freeze goes further by restricting access to your credit report entirely.
To set this up, you can contact Equifax, Experian, and TransUnion directly. Each bureau allows you to freeze your credit for free. As a result, this is one of the most effective and low-cost tools available for reducing the risk of new-account fraud after a Social Security number exposure.
Monitor Your Credit Reports Regularly
In addition to freezing your credit, you should review your credit reports for any unfamiliar accounts or inquiries. You can request a free copy of your report from each of the three major bureaus through AnnualCreditReport.com. Checking these reports regularly helps you catch suspicious activity early.
If you notice any account you did not open, report it immediately to the credit bureau and the relevant financial institution. This quick action can limit the damage and help establish a paper trail. Because fraud involving stolen Social Security numbers can take months or even years to surface, ongoing vigilance matters more than a single check.
Stay Alert for Phishing Attempts
After a data breach, scammers often try to take advantage of public awareness by sending fake emails or text messages. These messages may claim to be from American Board of Preventative Medicine or a related credit monitoring service. Therefore, you should never click on links or provide personal information in response to unsolicited messages.
Instead, verify any communication by contacting the organization directly through a known, official phone number or website. This simple habit can prevent you from accidentally handing over additional personal details to a scammer posing as a legitimate representative.
Consider Filing Your Taxes Early
Because Social Security numbers can be used to file fraudulent tax returns, affected individuals may want to file their taxes as early as possible each year. This reduces the window of opportunity for a criminal to file a return in your name before you do. If you suspect tax-related fraud, the IRS offers an Identity Protection PIN program that adds another layer of security.
Furthermore, if you ever receive a notice from the IRS about a return you did not file, report it right away. Acting quickly can help resolve the issue before it causes lasting financial damage. Given the uncertainty around this breach’s full scope, this extra precaution is a reasonable step for anyone who may be affected.
Consult a Data Breach Attorney
If you received a notification letter from American Board of Preventative Medicine, you may want to speak with an attorney who focuses on data breach cases. An attorney can help you understand whether you qualify for compensation or participation in any potential legal action. Many offer free initial case evaluations, so there is little downside to asking questions.
Because the investigation details are still limited, legal counsel can also help you stay informed as more facts emerge. This is especially useful if additional data categories or a specific affected count are disclosed later. Taking this step early ensures you do not miss any filing deadlines tied to your state’s laws.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
Official data breach notification from California Attorney General
View the public data breach notification listing from Vermont Attorney General