Innovative Scientific Solutions 2025 Data Breach

The first-party notice supports that personal information was in the affected files, that some individuals had Social Security numbers in scope, and that medical information was involved. The public notice does not provide a complete detailed list covering names, birth dates, driver's licenses, cards, bank data, insurance policy numbers, prescriptions, diagnoses, or treatments. The previous broad field list is therefore narrowed; only a recipient's own notice can identify the fields involved for that person. The company said it had no indication of incident-related fraud as of the notice.

The sources do not identify the unauthorized party, initial-access method, access window, or whether files were definitively acquired; the company uses “potentially accessed and/or acquired.” A notified person should first check the person-specific field list. If a Social Security number was involved, the offered monitoring service, credit reports, a fraud alert, or a credit freeze may be considered. If medical information was involved, health-insurance explanations and health records can be reviewed for unfamiliar services. A match does not establish that every field was involved or prove a particular diagnosis, test, or treatment.