Medical Review Institute of America
bd_b677ba7c596b81e5 · schema v1 · pii pii-v1
Full breach record for Medical Review Institute of America →Medical Review Institute of America (MRIoA) experienced a sophisticated cyber-attack resulting in the unauthorized acquisition of protected health information (PHI). The incident was discovered on November 9, 2021, with the breach occurring on November 2, 2021. Affected data included demographic information, social security numbers, clinical information, and financial information. MRIoA engaged forensic experts, notified the FBI, and confirmed the deletion of the stolen data. The company implemented additional cybersecurity safeguards and offered one year of identity monitoring to affected individuals.
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_52e4d488e02f92b5Maine State AGfiled 2022-01-07Verified
- bd_5e57efec079d3411Washington State AGfiled 2022-01-07Verified
- bd_c7abd9b1253d20dcHHS OCRfiled 2022-01-07Verified
- bd_f42318e7d87b03dfOregon State AGfiled 2022-01-10(3d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 27d gap
- bd_fe420cc4b0d8e740South Carolina State AGfiled 2022-01-10(3d gap)Verified
- bd_077caade183c41aaMaine State AGfiled 2022-01-18(11d gap)Verified
- bd_ff6023931b968f08California State AGfiled 2022-01-18(11d gap)Verified
- bd_1e14ec3cbf1451dcHHS OCRfiled 2022-01-20(13d gap)Verified
- bd_3d174f7229de2ff3Maine State AGfiled 2022-02-03(27d gap)Verified
- bd_ae43d458dae1f29dCalifornia State AGfiled 2022-02-03(27d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-549771
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 7, 2022
- Raw hash
- 1aee2579ca74e6149f91b6b3cf3f3cd5e658ff5fbdef6976a2b1ff7512fc572e
Reporting entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Victim entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Incident
- Discovered
- Nov 9, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Contacted the FBI
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.