MCG Health, LLC

MCG Health, a HIPAA business associate, discovered on March 25, 2022, that an unauthorized party had obtained personal and health information of its customers' patients and members. The data may have been acquired around February 25-26, 2020. The compromised information included names, Social Security numbers, medical codes, postal addresses, telephone numbers, email addresses, dates of birth, and gender. In response, MCG engaged a forensic investigation firm, notified the FBI, enhanced its system security, and offered two years of identity protection and credit monitoring services to the affected individuals.