MedRevenu, LLC
bd_ee7c9906dc800598 · schema v1 · pii pii-v1
Full breach record for MedRevenu, LLC →MedRevenu, LLC, a healthcare billing services provider, notified the California Attorney General of a data security incident. The breach occurred on December 3, 2024, and was discovered on December 12, 2024, when a network disruption was detected. An investigation concluded in October 2025 that certain files containing personal information, including names, dates of birth, Social Security numbers, driver's license numbers, health insurance and medical information, and financial account numbers, may have been acquired without authorization. The company engaged cybersecurity experts, secured its network, and is offering 12 months of complimentary credit monitoring and fraud assistance to affected individuals.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-618117
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2026
- Raw hash
- f017a8defb29be5e6d8f45ad0f8b9aa9ab27a74274708dfd16491f22093ac300
Reporting entity
- Name
- MedRevenu, LLCnorm: medrevenu
- Domain
- medrevenu.com
Victim entity
- Name
- MedRevenu, LLCnorm: medrevenu
- Domain
- medrevenu.com
Incident
- Discovered
- Dec 12, 2024
- Materiality determined
- —
- Notification sent
- Feb 3, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 14 months(418 days from discovery to filing)
- Compliance flags
- CA 60-day late · 418dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 12, 2024→ Notified: Feb 3, 2026418d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Feb 3, 2026→ AG copy submitted: Feb 3, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.