HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Medical Review Institute of America
bd_077caade183c41aa · schema v1 · pii pii-v1
Full breach record for Medical Review Institute of America →Medical Review Institute of America reported an external system breach (hacking) occurring on November 2, 2021, discovered on November 9, 2021. The incident compromised the names and Social Security Numbers of approximately 157,885 individuals, including 269 Maine residents. The entity notified affected individuals in writing on January 20, 2022, and provided 12 months of credit monitoring and identity theft protection services.
Maine clockDiscovered Nov 9, 2021 → Filed with AG Jan 18, 202270d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_ff6023931b968f08California State AGfiled 2022-01-18Verified
- bd_1e14ec3cbf1451dcHHS OCRfiled 2022-01-20(2d gap)Verified
- bd_f42318e7d87b03dfOregon State AGfiled 2022-01-10(8d gap)Verified
- bd_fe420cc4b0d8e740South Carolina State AGfiled 2022-01-10(8d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 16d gap
- bd_52e4d488e02f92b5Maine State AGfiled 2022-01-07(11d gap)Verified
- bd_5e57efec079d3411Washington State AGfiled 2022-01-07(11d gap)Verified
- bd_b677ba7c596b81e5California State AGfiled 2022-01-07(11d gap)Verified
- bd_c7abd9b1253d20dcHHS OCRfiled 2022-01-07(11d gap)Verified
- bd_3d174f7229de2ff3Maine State AGfiled 2022-02-03(16d gap)Verified
- bd_ae43d458dae1f29dCalifornia State AGfiled 2022-02-03(16d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d285f57d-3e03-4be5-992e-02ca8d882dc0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 18, 2022
- Raw hash
- d565a53d9def4e7cda8034cf4835f95db5482514427183a39ce8b6343c874687
Reporting entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Victim entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Incident
- Discovered
- Nov 9, 2021
- Materiality determined
- —
- Notification sent
- Jan 20, 2022
- Affected individuals
- 157,885
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified consumer reporting agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 72d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 9, 2021→ Filed with AG: Jan 18, 202270d 30 days (soft) ME AG >30d Maine Discovered: Nov 9, 2021→ Notified: Jan 20, 202272d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.