MCG Health, LLC
ent_c6818b3ec454e96421920fbe
Disclosures
11
State AG · HHS OCR · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
1,100,000
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- MCG Health, LLC
- Normalized
- mcg health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- mcg.com
Disclosure history (11)newest first
- New Hampshire State AGas victim2022-07-08
MCG Health, LLC filed a supplemental notice with the NH AG regarding a data security incident affecting customers' patients/members. MCG determined on March 25, 2022 that an unauthorized party obtained personal info including SSNs, medical codes, and DOBs. This notice covers approximately 5 additional NH residents. MCG retained forensic investigators, coordinated with the FBI, and offers 2 years of credit monitoring.
- Montana State AGas victim2022-06-27
MCG Health, LLC, a vendor for Providence St. Joseph Health, experienced unauthorized access to a file containing patient PHI (SSNs, DOBs, medical codes, names) on March 25, 2022. Providence notified affected individuals on June 27, 2022, offering 1 year of identity protection. MCG engaged forensic investigators and law enforcement.
- Maine State AGas victim2022-06-21
MCG Health, a HIPAA business associate, discovered on March 25, 2022, that an unauthorized party had obtained personal and health information of its customers' patients and members. The data may have been acquired around February 25-26, 2020. The compromised information included names, Social Security numbers, medical codes, postal addresses, telephone numbers, email addresses, dates of birth, and gender. In response, MCG engaged a forensic investigation firm, notified the FBI, enhanced its system security, and offered two years of identity protection and credit monitoring services to the affected individuals.
- Idaho State AGas victim2022-06-13
MCG Health, LLC notified the Idaho AG that an unauthorized party obtained customer patient/member data including SSNs, medical codes, and PII. MCG determined the breach on March 25, 2022. One Idaho resident was affected. MCG retained forensic investigators, coordinated with the FBI, and offered 2 years of credit monitoring.
- Indiana State AGas victim2022-06-10
MCG Health, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-25 and was reported on 2022-06-10. 59,598 Indiana residents were affected. 1,100,000 individuals affected in total.
- WASHINGTONHHS OCRas victim2022-06-10
MCG Health, LLC reported to HHS on 2022-06-10 a Hacking/IT Incident affecting 793,283 individuals. Breached information located on Network Server. Business Associate present.
- Montana State AGas victim2022-06-10
MCG Health, LLC notified Montana residents of a data breach where an unauthorized party accessed personal and health information. MCG determined the incident on March 25, 2022. Data included names, SSNs, medical codes, and DOBs. MCG retained forensic investigators, coordinated with the FBI, and offered 2 years of credit monitoring.
- Maine State AGas victim2022-06-10
MCG Health, LLC, a healthcare business associate, disclosed a breach affecting 1,100,000 individuals. Unauthorized parties obtained patient/member data (SSNs, names, medical codes, PII) matching MCG's systems. The breach occurred around Feb 25-26, 2020, but was discovered March 25, 2022. MCG retained forensic investigators, coordinated with the FBI, and offers two years of Experian credit monitoring.
- Massachusetts State AGas victim2022-06-10
MCG Health, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-06-10. 1,330 Massachusetts residents were affected. The report records the breach type as electronic.
- Illinois State AGas victim2022-01-01
MCG HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-388). The register records the breach as discovered on March 25, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
MCG HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-405). The register records the breach as discovered on March 25, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.