R1 RCM HOLDCO INC.
ent_019e0d68f8b08f1d9b060baf10b52e3c
Disclosures
5
State AG · HHS OCR · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
16,121
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- R1 RCM HOLDCO INC.
- Normalized
- r1 rcm holdco— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300VKOMJ3EM506212
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- r1rcm.com
Disclosure history (5)newest first
- New Hampshire State AGas reporting2024-03-12
R1 RCM Inc., acting as business associate for St. Rose Dominican Hospital de Lima, notified NH AG of a privacy incident affecting 2 NH residents. Unauthorized access occurred Jan 30, 2023 via zero-day exploit of GoAnywhere software. PHI including SSN, DOB, and diagnosis info was exposed. Notification mailed March 11, 2024.
- Massachusetts State AGas victim2024-03-12
R1 RCM Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-12. 3 Massachusetts residents were affected.
- Indiana State AGas victim2024-03-11
R1 RCM Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-30 and was reported on 2024-03-11. 4 Indiana residents were affected. 16,121 individuals affected in total.
- ILLINOISHHS OCRas victim2024-03-11
R1 RCM Inc. (Business Associate, IL) reported to HHS on 2024-03-11 a Hacking/IT Incident affecting 16,121 individuals. Breached information was located on a Network Server. The PHI involved included names, addresses, dates of birth, social security numbers, diagnoses, and conditions. The BA notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards as mitigation.
- Illinois State AGas victim2024-03-01
R1 RCM INC. filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-045). The register records the breach as discovered on January 30, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.