Professional Business Systems, Inc.

Professional Business Systems, Inc. d/b/a Practicefirst Medical Management Solutions experienced a ransomware incident on December 30, 2020. An unauthorized actor attempted to encrypt systems and exfiltrated files containing patient and employee PII, PHI, and financial data. Approximately 1,210,688 individuals were affected, including 284 New Hampshire residents. The company shut down systems, engaged forensic experts, and offered two years of identity monitoring.

Professional Business Systems, operating as Practicefirst Medical Management Solutions and PBS Medcode Corp., reported an external system breach that occurred on December 25, 2020, and was discovered on December 30, 2020. The breach affected 1,210,688 individuals, compromising names and Social Security numbers. The company notified affected individuals on June 30, 2021, and offered two years of identity theft protection services.

Professional Business Systems, d/b/a Practicefirst Medical Management Solutions, notified Montana residents of a December 30, 2020 ransomware incident. The actor attempted to encrypt systems but copied patient and employee files containing PII, PHI, and financial data before deletion. Practicefirst shut down systems, alerted law enforcement, and offered two years of Kroll identity monitoring. No misuse was found.

Professional Business Systems, Inc. (dba Practicefirst Medical Management Solutions and PBS Medcode Corp.), a business associate, reported to HHS on 2021-07-01 a ransomware incident affecting 1,210,688 individuals. Breached information located on Network Server. PHI exposed included names, addresses, dates of birth, SSNs, health insurance, clinical, and financial information. The BA implemented additional safeguards and retrained staff.

California SB-24 breach notification sample filed by Professional Business Systems d/b/a Practicefirst Medical Management Solutions and PBS Medcode Corp. The filing lists a breach date of December 25, 2020. The attached redacted notice sample describes a breach affecting patient records, including names, SSNs, DOBs, and financial account numbers. No specific attack vector or count is provided in the HTML body.

Professional Business Systems d/b/a Practicefirst Medical Management Solutions reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-01. 1,318 Massachusetts residents were affected. The report records the breach type as electronic.

PROFESSIONAL BUSINESS SYSTEMS, INC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-247). The register records the breach as discovered on December 30, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.