Medical Management Resource Group, L.L.C.

Medical Management Resource Group, L.L.C., d.b.a. American Vision Partners (“MMRG”) reported a data breach to the Oregon Attorney General. The breach was reported on 2024-02-29. 2,264,157 individuals were affected.

Medical Management Resource Group, L.L.C. (d.b.a. American Vision Partners) detected unauthorized activity on its network on November 14, 2023. The incident exposed personal information of employees and patients of affiliated ophthalmology practices, including names, SSNs, medical records, and bank account numbers. The company contained the incident, engaged third-party investigators, and offered two years of credit monitoring.

Medical Management Resource Group (d.b.a. American Vision Partners) reported an external system breach (hacking) occurring on November 14, 2023, discovered on January 16, 2024. The incident affected 2,264,157 individuals, including 394 in Maine. Stolen data included names combined with driver's license numbers. The entity provided 24 months of credit monitoring via TransUnion.

Medical Management Resource Group (d.b.a. American Vision Partners) notified the NH AG of unauthorized access detected on Nov 14, 2023. The incident affected ~322 NH patient residents and 1 NH employee. Data exposed included PHI and SSNs. MMRG engaged third-party cybersecurity firms, coordinated with law enforcement, and provided credit monitoring/identity protection to affected individuals.

Medical Management Resource Group, LLC (dba American Vision Partners) notified patients of a cybersecurity incident detected on November 14, 2023. Unauthorized parties accessed patient data including names, DOBs, SSNs, medical records, and insurance info. Affected individuals were offered 2 years of credit monitoring. The incident is currently contained.

Medical Management Resource Group, LLC, dba American Vision Partners reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-14 and was reported on 2024-02-15. 2,281 Indiana residents were affected. 2,264,157 individuals affected in total.

Medical Management Resource Group, LLC issued a consumer notification letter dated February 13, 2024, regarding unauthorized access to accounts. The breach involved the misuse of stolen credentials, leading to potential identity theft and unauthorized financial transactions. Affected individuals were advised to monitor accounts, place fraud alerts or security freezes, and report incidents to law enforcement and the FTC.

Medical Management Resource Group, L.L.C. reported a ransomware cyberattack on November 14, 2023, affecting 4,482 Washington residents. The breach involved the exfiltration of personal and government-issued identification data. The company engaged TransUnion to provide two years of free credit monitoring and fraud assistance to affected individuals.

Medical Management Resource Group, L.L.C. reported to HHS on 2024-02-06 a Hacking/IT Incident affecting 2,264,157 individuals. Breached information located on Network Server. The business associate experienced a cyber-attack exposing PHI including names, DOB, addresses, diagnoses, medications, and claims/financial data. Response included credit monitoring and technical safeguards.

MEDICAL MANAGEMENT RESOURCE GROUP, LLC. filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-065). The register records the breach as discovered on November 14, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.