Morley Companies, Incorporated

Morley Companies, Inc., a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2021-08-01 and filed notice on 2022-03-21. 42,633 Washington residents were affected. 232 days elapsed between awareness and notification. 12 days to identify the breach. 32 days to contain the breach.

Morley Companies, Inc., a Michigan-based health plan processing firm, experienced a ransomware-type malware attack beginning August 1, 2021, which prevented access to certain files and resulted in unauthorized access to personal information including Social Security numbers. The company discovered the incident, engaged third-party forensic specialists, and confirmed affected individuals in March 2022. IDX credit and identity monitoring services were offered for 24 months.

Morley Companies, Inc. reported a supplemental data security incident to the New Hampshire Attorney General on March 21, 2022. The incident involved ransomware-type malware affecting systems starting August 1, 2021. Approximately 30 individuals were notified, with data potentially including SSNs, names, DOBs, driver's license numbers, and health information. Morley engaged forensic specialists and provided 24 months of credit/identity monitoring via IDX.

Morley Companies, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-02-08. The breach occurred during 7/20/2021 - 9/2/2021. The breach was discovered on 1/20/2022. 590,785 individuals were affected. Notice was sent on 2/8/2022.

Morley Companies, Inc., a Michigan-based firm processing information for health plans, experienced a ransomware attack beginning August 1, 2021. The malware prevented access to files and allowed unauthorized access to data containing personal information including Social Security numbers. On January 18, 2022, the company confirmed affected individuals. Notification letters were sent February 1, 2022. IDX credit/identity monitoring (24 months) was offered to affected individuals.

Morley Companies, Inc. filed a supplemental notification with the New Hampshire Attorney General regarding a ransomware incident affecting 35 individuals. The attack began on August 1, 2021, encrypting files and preventing system access. The breach exposed Social Security numbers, names, dates of birth, driver's license numbers, and health information. Notifications were mailed on February 1, 2022, offering 24 months of credit and identity monitoring through IDX.

Morley Companies, Inc. reported a data breach affecting 62 Maine residents. The breach, an external system hacking incident, occurred on July 20, 2021, and was discovered on January 26, 2022. The compromised information includes names and Social Security numbers. Affected individuals were notified on February 1, 2022, and offered 12 months of credit and identity theft protection services through IDX.

Morley Companies, Inc. reported to HHS on 2022-02-01 a Hacking/IT Incident affecting 659,194 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, SSNs, and treatment data. The entity provided credit monitoring and implemented security safeguards.

Morley Companies, Inc. experienced an external system breach (hacking) that was discovered on December 22, 2021. The breach occurred on July 2, 2021, and affected 2 Maine residents. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes, access codes, passwords, or PINs. Written notifications were sent to affected consumers on January 26, 2022, and 12 months of credit and identity theft protection services were offered through IDX.