MCG Health, LLC
bd_a0380ae2d23fe355 · schema v1 · pii pii-v1
Full breach record for MCG Health, LLC →MCG Health, a HIPAA business associate, discovered on March 25, 2022, that an unauthorized party had obtained personal and health information of its customers' patients and members. The data may have been acquired around February 25-26, 2020. The compromised information included names, Social Security numbers, medical codes, postal addresses, telephone numbers, email addresses, dates of birth, and gender. In response, MCG engaged a forensic investigation firm, notified the FBI, enhanced its system security, and offered two years of identity protection and credit monitoring services to the affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 25, 2020
Begins
Mar 25, 2022
Discovered
Jun 21, 2022
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Montana State AGbd_8779641a7cb24f1a2022-06-27 · +6dVerified
- Idaho State AGbd_a83f0caaa719a65b2022-06-13 · +8dVerified
- Indiana State AGbd_04114e3688672cef2022-06-10 · +11dVerified
- HHS OCRbd_0a30370a2ec4495d2022-06-10 · +11dVerified
Show 6 more filings ↓Show fewer ↑up to 171d gap
- Montana State AGbd_345bdaa71a2ac5fb2022-06-10 · +11dVerified
- Maine State AGbd_7b1a709405fc53f92022-06-10 · +11dVerified
- Massachusetts State AGbd_b99d1929a95c95f92022-06-10 · +11dVerified
- New Hampshire State AGbd_ab2f3099d15b3ab82022-07-08 · +17dVerified
- Illinois State AGbd_8cb2b43da00a45df2022-01-01 · +171dCandidate
- Illinois State AGbd_9097fcbc166e7a792022-01-01 · +171dVerified
Filing propagation · 11 filings · 8 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Jul 8 (NH) — a 188-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.