Med-data incorporated
ent_c86bc4e4cc7f934541a94ac2
Disclosures
9
State AG · HHS OCR · 9 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
135,908
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Med-data incorporated
- Normalized
- med data— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- Maine State AGas victim2021-07-16
Med-Data Incorporated reported the loss or theft of a device containing personal information, including names and Social Security Numbers, affecting 135,908 individuals. The breach occurred on December 24, 2018, and was discovered on February 5, 2021. Written notification was sent on March 31, 2021, offering 12 months of credit monitoring and identity protection services through IDX. 13 Maine residents were affected.
- Oregon State AGas victim2021-05-05
Med-Data Inc reported a data breach to the Oregon Attorney General. The breach was reported on 2021-05-05. The breach occurred during 12/1/2018 - 9/30/2019. The breach was discovered on 12/14/2020. Notice was sent on 3/31/2021.
- Massachusetts State AGas victim2021-04-26
Med-Data Incorporated reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-26. 98 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2021-04-26
Med-Data Incorporated reported a data breach to the California Attorney General. The unauthorized access occurred between December 1, 2018, and September 30, 2019. The provided source document contains only the filing metadata and an empty attachment placeholder; no narrative details regarding the nature of the breach, data types affected, or response actions are available in the text.
- New Hampshire State AGas victim2021-04-08
Med-Data, a revenue cycle services provider for healthcare systems, disclosed a security incident where a former employee saved files containing PHI (including SSNs, DOBs, and medical data) to a public website between Dec 2018 and Sep 2019. The incident was discovered on Dec 10, 2020, after a journalist alerted the company. 12 New Hampshire residents were affected. Med-Data engaged forensic specialists, removed the data, notified law enforcement and HHS, and offered credit monitoring.
- TEXASHHS OCRas victim2021-04-01
MedData Incorporated reported to HHS on 2021-04-01 a Unauthorized Access/Disclosure affecting 135908 individuals. Breached information located on Other. An employee inadvertently published PHI including names, SSNs, and medical data via the Internet.
- Hawaii State AGas victim2021-03-31
Med-Data Incorporated reported a data breach to the Hawaii Office of Consumer Protection. The office was notified on 2021/03.31. Breach type: Hackers/Unauthorized Access. 1,396 Hawaii residents were affected. Recovered from the Internet Archive after the notice was removed from the OCP table.
- Indiana State AGas victim2021-03-31
Med-Data Incorporated reported a data breach to the Indiana Attorney General. The breach occurred on 2018-12-01 and was reported on 2021-03-31. 1,258 Indiana residents were affected. 135,908 individuals affected in total.
- Montana State AGas victim2021-03-31
Med-Data, Incorporated notified Montana residents of a data security incident involving PHI. A former employee saved files containing patient data to personal folders on a public-facing website between Dec 2018 and Sep 2019. The files were discovered on Dec 10, 2020, and removed on Dec 17, 2020. Med-Data engaged cybersecurity specialists, implemented new security controls (SOC, MDR, blocked file sharing), and offered credit monitoring services.