HackingData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
South Carolina Public Employee Benefit (PEBA)
bd_cb4bad466e36ba94 · schema v1 · pii pii-v1
Full breach record for South Carolina Public Employee Benefit (PEBA) →Medical Review Institute of America (MRIoA) notified South Carolina Public Employee Benefit (PEBA) of a cyber-attack discovered on November 9, 2021. The incident involved unauthorized access to systems containing protected health information (PHI), including names, SSNs, and medical history. MRIoA engaged forensic experts, contacted the FBI, and confirmed deletion of exfiltrated data. Affected individuals received one year of identity monitoring via Kroll. No evidence of misuse was found at the time of notification.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/PEBA.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2022
- Raw hash
- 17ba348b8239a03f434711b67a9c1af5a13932b2d0d55c1dc6cbc9927eada351
Reporting entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Victim entity
- Name
- South Carolina Public Employee Benefit (PEBA)norm: south carolina public employee benefit peba
- Industry
- healthcare
Incident
- Discovered
- Nov 9, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.