HackingData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Medical Review Institute of America
bd_fe420cc4b0d8e740 · schema v1 · pii pii-v1
Full breach record for Medical Review Institute of America →Medical Review Institute of America (MRIoA) disclosed a cyber-attack discovered on November 9, 2021, involving unauthorized access to protected health information (PHI) and personal data (SSN, DOB, demographics). MRIoA engaged forensic experts and the FBI, retrieved exfiltrated data, and confirmed its deletion. Affected individuals received one year of credit monitoring via Kroll. Remediation included enhanced authentication, new servers, and policy updates. No evidence of misuse was found at the time of notification.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_f42318e7d87b03dfOregon State AGfiled 2022-01-10Verified
- bd_52e4d488e02f92b5Maine State AGfiled 2022-01-07(3d gap)Verified
- bd_5e57efec079d3411Washington State AGfiled 2022-01-07(3d gap)Verified
- bd_b677ba7c596b81e5California State AGfiled 2022-01-07(3d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 24d gap
- bd_c7abd9b1253d20dcHHS OCRfiled 2022-01-07(3d gap)Verified
- bd_077caade183c41aaMaine State AGfiled 2022-01-18(8d gap)Verified
- bd_ff6023931b968f08California State AGfiled 2022-01-18(8d gap)Verified
- bd_1e14ec3cbf1451dcHHS OCRfiled 2022-01-20(10d gap)Verified
- bd_3d174f7229de2ff3Maine State AGfiled 2022-02-03(24d gap)Verified
- bd_ae43d458dae1f29dCalifornia State AGfiled 2022-02-03(24d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/MedicalReviewInstituteofAmerica.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2022
- Raw hash
- c958d9303181e738b732fe16d18c712bc77c710c67d051b904721be6aae98bef
Reporting entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Victim entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Incident
- Discovered
- Nov 9, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Contacted the FBI
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.