American Board of Preventive Medicine Data Breach: One Federal Suit, No Settlement
Active Litigation
The American Board of Preventive Medicine (ABPM) certifies physicians in preventive medicine. It says an intruder took files from its network between March 8 and March 10, 2026, and that it found out on September 24, 2026 that those files held personal information. Notice letters went out in October. A federal lawsuit, Martin v. The American Board of Preventive Medicine, is open in Chicago. As of October 18, 2026 there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What ABPM Says Happened
ABPM is based in Chicago. It runs the certification and maintenance-of-certification programs for physicians in preventive medicine and its specialties. That means it holds personal records on the doctors who sit its exams and keep their certificates current.
According to ABPM’s notice letter, it learned that “an unauthorized actor gained access to our network environment.” After a forensic investigation and manual document review, ABPM says it discovered on or about September 24, 2026 that files accessed or taken between about March 8 and March 10, 2026 contained personal information. That is more than six months between the intrusion and the finding.
The sample letter ABPM filed with California lists “your full name and” then blanks out the rest, because each letter is filled in with the fields that applied to that person. Your own letter is the only reliable list of what was exposed. ABPM says it has “no knowledge” that anyone’s information has been misused.
Separately, a breach-tracking site recorded a leak-site claim against ABPM’s domain on May 11, 2026, with a claimed size of 200GB. That is an attacker’s claim. ABPM has not confirmed it, and the same listing gets ABPM’s location and field wrong.
Case details
The lawsuit: Martin v. The American Board of Preventive Medicine Incorporated, No. 1:26-cv-12130, U.S. District Court for the Northern District of Illinois (Chicago). According to the public docket listing, it was filed on October 2, 2026, it is assigned to Judge Georgia N. Alexakis, and the plaintiff demands a jury. The court’s electronic feed shows an order entered on October 13, 2026.
What we could not confirm: we were not able to read the complaint itself. The timing and the defendant point to the breach, but the docket listing alone does not say what the claims are or whether the suit is filed as a class action. We will update this page once the complaint is readable.
Regulator filing: ABPM reported the breach to the California Attorney General on October 13, 2026, giving March 8, 2026 as the breach date. No public filing we could find states how many people were affected.
Status: Early Lawsuit, No Settlement
The only deadline that exists right now is ABPM’s own offer: the free IDX credit monitoring in the notice letter must be activated by January 6, 2027. Signing up for it does not affect your rights in any lawsuit.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Affected
People who got an ABPM notice letter are the people ABPM identified in the stolen files. In practice that is mainly physicians and candidates who have dealt with ABPM’s certification programs, though the letter does not limit it to them. ABPM has not published how many people were affected.
Your letter is your proof. Keep it, together with the envelope. It lists the fields that were exposed in your record, and it carries the enrollment code for the free monitoring. If a class is ever certified or a settlement is reached, the court-appointed administrator uses lists like the one behind these letters to send notice. You do not need to sign up anywhere to be included.
What You Could Get — and What You Can Get Now
What is available now comes from ABPM’s letter: complimentary IDX Credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and fully managed identity-theft recovery services. Enrollment closes January 6, 2027.
For context, not a prediction: settled data-breach class actions usually pay documented out-of-pocket losses up to a cap, a smaller flat payment to people who document nothing, and sometimes extra monitoring. Our data breach settlement calculator shows what comparable cases paid. Keep receipts for any costs and records of time spent dealing with fraud. That paperwork is what pays more if a settlement ever comes.
ABPM Data Breach Timeline
March 8–10, 2026 — Files Taken
Per ABPM’s letter, an unauthorized actor in its network accessed or took electronic files during these three days.
May 11, 2026 — Leak-Site Claim
A breach tracker records an attacker’s claim of a 200GB leak tied to ABPM’s domain. ABPM has not confirmed this claim.
September 24, 2026 — Personal Data Confirmed
After forensic and manual document review, ABPM says it found that the files contained personal information.
October 2, 2026 — Federal Suit Filed
Martin v. The American Board of Preventive Medicine Incorporated, No. 1:26-cv-12130, is filed in the Northern District of Illinois, per the docket listing.
October 13, 2026 — California Notified
ABPM files its breach report and sample letter with the California Attorney General. The court enters an order in the Martin case the same day.
As of October 18, 2026 — No Settlement
The lawsuit is at its first stage. No fund, administrator, claim form or claim deadline exists. Monitoring enrollment runs to January 6, 2027.
Three Things to Watch For
Physicians are a valuable target, and a breach that just hit the news invites imitators:
“ABPM settlement claim” pages
There is no ABPM settlement and no claims site. A page asking for your Social Security number or bank details to “secure your share” is collecting data, not filing a claim.
Fake certification or exam emails
The attacker may know you are an ABPM diplomate or candidate. Expect emails about certification renewal, continuing-certification requirements or exam fees that link to a fake login. Go to theabpm.org yourself instead of clicking a link.
Callers “from IDX” or “from ABPM”
The real response line is the toll-free number printed in your letter, 1-888-202-2907. If someone calls you and asks for a fee or your full Social Security number to “activate” monitoring, hang up and call that number yourself.
ABPM Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there an American Board of Preventive Medicine data breach lawsuit?
A federal case against ABPM is on file, but we could not confirm it is about the breach. Martin v. The American Board of Preventive Medicine Incorporated, No. 1:26-cv-12130, was filed October 2, 2026 in the Northern District of Illinois, per the docket listing, and is assigned to Judge Georgia N. Alexakis. We could not read the complaint, so we cannot yet confirm its claims or whether it is pleaded as a class action.
Is the data breach settlement legit?
For ABPM there is no settlement at all as of October 18, 2026, so any “ABPM settlement” claim site or email is not real. The notice letter itself is genuine: ABPM filed the same letter with the California Attorney General on October 13, 2026.
Is my ABPM letter real?
The letters were mailed from P.O. Box 989728, West Sacramento, CA, which is the return address printed on the letter. They are signed by ABPM with its Chicago address, 111 W. Jackson Blvd, and give the response line 1-888-202-2907 (Monday to Friday, 9 am to 9 pm Eastern). If yours matches those details, it is the real notice. Our IDX letter guide explains why the letter comes through IDX.
How many people were affected?
ABPM has not published a number. Its California filing of October 13, 2026 does not state one, and breach trackers list the count as undisclosed.
What data was exposed?
Your full name, plus whatever other fields your own letter lists. The public sample letter blanks those fields out because they differ from person to person. The letter also includes tips on protecting medication information.
How much compensation will I get for a data breach?
From ABPM, nothing right now: there is no settlement, no fund and no claim form. What you can get today is the free IDX monitoring and identity-theft recovery offered in the letter, with enrollment open until January 6, 2027. If a settlement ever happens, documented losses usually pay more than the flat amount.
Do I have to do anything to be part of a lawsuit?
No. If a class is certified or a settlement is reached, the court-appointed administrator sends notice to the people on the breach list, and you are included unless you opt out. Signing a law firm’s retainer is a separate choice, not a registration.
What should I do right now?
Activate the IDX monitoring before January 6, 2027 using the code in your letter. Freeze your credit at all three bureaus; it is free and reversible. Pull your free credit reports and watch your financial accounts. Keep the letter and envelope.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- IDX Data Breach LetterWhy a breach notice comes from IDX and how to check it is real
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Settlement Payout CalculatorHow fund size and claim rates set what each person gets