American Association of Colleges of Osteopathic Medicine Data Breach Lawsuit Investigation
Were you one of the 67,804 people whose Social Security number was leaked by AACOM? Identity thieves can strike fast—don’t wait. Learn how to safeguard your data and see if you qualify for compensation today.
Quick Facts
- Organization: American Association of Colleges of Osteopathic Medicine (AACOM)
- Breach Discovered: March 31, 2025
- Breach Occurred: September 26, 2024
- Individuals Affected: 67,804 nationwide
- Data Exposed: Names, Social Security numbers, dates of birth, addresses, government IDs, medical and financial information*
*State filings list only names and Social Security numbers as definitively confirmed. Other categories are referenced in broader disclosures.
What Happened?
AACOM—an influential nonprofit that represents 42 accredited colleges of osteopathic medicine—detected suspicious activity on its network on March 31, 2025. An internal forensic review later revealed that cyber-intruders had accessed a server six months earlier, on September 26, 2024. By the time the breach was confirmed, hackers had siphoned off files containing the full names and Social Security numbers of 67,804 current and former applicants, students, and staff.
The organization filed mandatory reports with multiple state attorneys general between April 8 and April 10, 2025, and began emailing formal notice letters to impacted individuals.
Download Official Breach Notice (PDF)Who Is at Risk?
While every victim faces potential identity theft, state-level disclosures highlight the following regional impact:
- Texas – 3,596 people
- Massachusetts – 1,128 people
- Maine – 428 people
- Montana – 274 people
- New Hampshire – 259 people
- California – estimated 500+ people
Why Social Security Number Exposure Is Serious
Unlike a password, a Social Security number cannot be easily changed. Once criminals possess it, they can:
- Open new credit lines or loans in your name
- File fraudulent tax returns and claim refunds
- Commit medical or government benefits fraud
- Sell your PII on dark-web marketplaces
Monitoring alone may not block these crimes—active steps and potential legal remedies are crucial.
Your Legal Options
Data-breach laws allow victims to seek damages for:
- Out-of-pocket fraud losses
- Time spent freezing credit and cleaning up identity theft
- Emotional distress and privacy violations
- Preventive services such as credit monitoring and identity-theft insurance
Class-action attorneys are now investigating whether AACOM employed adequate cybersecurity measures. If negligence is proven, you could be entitled to compensation without paying upfront legal fees.
Protect Yourself Now
- Check your notice letter. Confirm what data of yours was involved.
- Place a free fraud alert with Equifax, Experian, and TransUnion—or freeze your credit entirely.
- Monitor bank and credit-card statements weekly for at least 12 months.
- File an FTC identity-theft report at IdentityTheft.gov if you spot suspicious activity.
- Document any time or money you spend addressing the breach; it may be reimbursable in a settlement.
Frequently Asked Questions
What information did the American Association of Colleges of Osteopathic Medicine data breach expose?
State filings confirm exposure of full names and Social Security numbers. AACOM’s broader disclosure references dates of birth, addresses, government IDs, and limited medical or financial details.
How do I know if I am included in the AACOM breach?
AACOM emailed notification letters starting April 8, 2025. If you receive one—or if you applied to osteopathic medical schools via AACOMAS during the affected period—assume your data may be compromised.
Is there a class-action lawsuit against AACOM yet?
Attorneys are actively investigating and preparing potential class actions. By registering, you will receive updates and instructions if a lawsuit is filed.
Does AACOM offer free credit monitoring?
The organization has not publicly detailed any complimentary services. Review your notice letter for enrollment instructions, or contact AACOM directly.
What compensation could I receive from an AACOM data breach lawsuit?
Settlements typically cover documented financial losses, time spent resolving identity issues, and sometimes statutory damages or credit-monitoring services.
How long do I have to take legal action?
Statutes of limitation vary by state—often 1–4 years from discovery. Acting promptly helps safeguard both your finances and legal rights.
About AACOM
Founded in 1898, the American Association of Colleges of Osteopathic Medicine supports 42 accredited colleges across 36 states and runs AACOMAS, the centralized application portal for prospective osteopathic medical students. Collectively, its member schools educate more than 35,000 future physicians—around one-quarter of all U.S. medical students.