Benefit Recovery Specialists, Inc.
ent_de15fd2c62bb5303a623fc59
Disclosures
4
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
447,354
nationwide · HHS OCR TX
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Benefit Recovery Specialists, Inc.
- Normalized
- benefit recovery specialists— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- Montana State AGas victim2020-07-02
Benefit Recovery Specialists, Inc. (BRSI) disclosed a malware incident discovered on April 30, 2020. An unauthorized actor accessed BRSI systems using employee credentials between April 20 and April 30, 2020, deploying malware and potentially accessing customer files containing personal information. BRSI took systems offline, engaged third-party specialists, reset credentials, disabled remote access, implemented MFA, and notified federal law enforcement.
- TEXASHHS OCRas victim2020-06-26
Benefit Recovery Specialists, Inc. reported to HHS on 2020-06-26 a Hacking/IT Incident affecting 447,354 individuals. Breached information located on Network Server. The attack exposed PHI including names, addresses, DOBs, SSNs, and treatment info. The BA retrained employees on security and implemented additional safeguards.
- Illinois State AGas victim2020-01-01
BENEFIT RECOVERY SPECIALISTS filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-246). The register records the breach as discovered on April 30, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2020-01-01
BENEFIT RECOVERY SPECIALISTS filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-253). The register records the breach as discovered on April 30, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.