HackingData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Medical Review Institute of America
bd_ae43d458dae1f29d · schema v1 · pii pii-v1
Full breach record for Medical Review Institute of America →Medical Review Institute of America (MRIoA) disclosed a cyber-attack on November 9, 2021, involving unauthorized access to protected health information (PHI) and personal data (SSN, DOB, demographics). MRIoA engaged forensic experts, notified the FBI, and confirmed deletion of exfiltrated data. Remediation included enhanced authentication, new servers, and Kroll-provided identity monitoring for affected individuals.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_3d174f7229de2ff3Maine State AGfiled 2022-02-03Verified
- bd_1e14ec3cbf1451dcHHS OCRfiled 2022-01-20(14d gap)Verified
- bd_077caade183c41aaMaine State AGfiled 2022-01-18(16d gap)Verified
- bd_ff6023931b968f08California State AGfiled 2022-01-18(16d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 27d gap
- bd_f42318e7d87b03dfOregon State AGfiled 2022-01-10(24d gap)Verified
- bd_fe420cc4b0d8e740South Carolina State AGfiled 2022-01-10(24d gap)Verified
- bd_52e4d488e02f92b5Maine State AGfiled 2022-01-07(27d gap)Verified
- bd_5e57efec079d3411Washington State AGfiled 2022-01-07(27d gap)Verified
- bd_b677ba7c596b81e5California State AGfiled 2022-01-07(27d gap)Verified
- bd_c7abd9b1253d20dcHHS OCRfiled 2022-01-07(27d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550665
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2022
- Raw hash
- d70e6f8a91d3c75af4621b774b5d6be885cf308b1233696750011e1f19b92113
Reporting entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Victim entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Incident
- Discovered
- Nov 9, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.