The Vermont Office of the Attorney General reported a data breach involving Advanced Health Media (AHM) on February 24, 2023. The breach involved unauthorized access to personal information, potentially including names, addresses, Social Security numbers, and driver’s license numbers, although the number of individuals affected is unknown.

Advanced Health Media (AHM), a subsidiary of IQVIA, suffered an external system breach where unauthorized actors gained access to sensitive personal information. The incident began on November 27, 2022, but was only detected on December 16, 2022. The breach impacted 26,932 individuals, including 64 Maine residents, with compromised data potentially including driver’s license numbers—a highly sensitive form of personally identifiable information (PII). As a healthcare-related entity, AHM handles data subject to strict regulatory protections (e.g., HIPAA in the U.S.). The exposure of driver’s license numbers increases risks of identity theft, financial fraud, and targeted phishing attacks against affected individuals. While the article does not specify whether the breach led to direct financial losses or operational disruptions for AHM, the scale and nature of the exposed data suggest significant reputational harm and potential legal liabilities, including regulatory fines or class-action lawsuits. The breach underscores vulnerabilities in AHM’s cybersecurity defenses, particularly in detecting and mitigating unauthorized access over an extended period (19 days). The incident aligns with broader trends in healthcare cyber threats, where third-party vendors (like AHM) often become entry points for attackers targeting larger parent companies (IQVIA) or their clients.