HackingData ExfiltratedCustomer Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Medical Review Institute of America
bd_ff6023931b968f08 · schema v1 · pii pii-v1
Full breach record for Medical Review Institute of America →Medical Review Institute of America (MRIoA) disclosed a cyber-attack discovered on November 9, 2021, involving unauthorized access to protected health information (PHI) including names, SSNs, medical history, and insurance details. The breach occurred on November 2, 2021. MRIoA engaged forensic experts, notified the FBI, and deleted the stolen data. Affected individuals were offered one year of identity monitoring via Kroll.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_077caade183c41aaMaine State AGfiled 2022-01-18Verified
- bd_1e14ec3cbf1451dcHHS OCRfiled 2022-01-20(2d gap)Verified
- bd_f42318e7d87b03dfOregon State AGfiled 2022-01-10(8d gap)Verified
- bd_fe420cc4b0d8e740South Carolina State AGfiled 2022-01-10(8d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 16d gap
- bd_52e4d488e02f92b5Maine State AGfiled 2022-01-07(11d gap)Verified
- bd_5e57efec079d3411Washington State AGfiled 2022-01-07(11d gap)Verified
- bd_b677ba7c596b81e5California State AGfiled 2022-01-07(11d gap)Verified
- bd_c7abd9b1253d20dcHHS OCRfiled 2022-01-07(11d gap)Verified
- bd_3d174f7229de2ff3Maine State AGfiled 2022-02-03(16d gap)Verified
- bd_ae43d458dae1f29dCalifornia State AGfiled 2022-02-03(16d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550043
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 18, 2022
- Raw hash
- 5ca138553c5472b6bb6524544aaeb6d6f048f5787aecea672170e99ba5af88e2
Reporting entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Victim entity
- Name
- Medical Review Institute of Americanorm: medical review institute of america
- Domain
- mrioa.com
Incident
- Discovered
- Nov 9, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Contacted the FBI
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.