The Medibase Group, Inc.
ent_22d2a1a2c305bb1f1d3e0721
Disclosures
6
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
117,957
nationwide · HHS OCR GA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Medibase Group, Inc.
- Normalized
- the medibase— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- Illinois State AGas victim2024-12-01
THE MEDIBASE GROUP, INC filed a data-breach notice with the Illinois Attorney General in December 2024 (case 24-12-053). The register records the breach as discovered on January 26, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Massachusetts State AGas victim2024-07-24
The Medibase Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-24. 13 Massachusetts residents were affected.
- New Hampshire State AGas victim2024-07-24
Medibase Group, Inc., a business associate for healthcare providers, disclosed a ransomware incident affecting 2 New Hampshire residents. The breach occurred around Jan 26, 2024, and was detected on Jan 29, 2024. PII and financial data were accessed. Medibase contained the threat, recovered encryption keys, and provided credit monitoring to affected individuals.
- South Carolina State AGas victim2024-07-11
The Medibase Group, Inc. notified affected individuals of a cybersecurity incident occurring around January 26, 2024, discovered on June 28, 2024. Unauthorized access to a Medibase system compromised personal information including names, SSNs, addresses, and outstanding balances. Medibase engaged forensic investigators, notified federal law enforcement, and provided 12 months of credit monitoring.
- Massachusetts State AGas victim2024-07-05
The Medibase Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-05. 684 Massachusetts residents were affected.
- GEORGIAHHS OCRas victim2024-07-05
The Medibase Group, Inc. (GA), a business associate, reported to HHS OCR on 2024-07-05 a ransomware attack affecting 117,957 individuals. Breached information was located on a Network Server. PHI exposed included names, dates of birth, Social Security numbers, financial information, and health insurance and treatment information. The BA notified affected individuals, media, and HHS on behalf of covered entities, implemented improved technical safeguards, and received HIPAA Security Rule technical assistance from OCR.