Greater Rochester Independent Practice Association, Inc.
ent_e6d0800a99df83c0c37bd172
Disclosures
9
HHS OCR · State AG · Leak Site · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
279,156
nationwide · HHS OCR NY
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- Greater Rochester Independent Practice Association, Inc.
- Normalized
- greater rochester independent practice— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- gripa.org
Disclosure history (9)newest first
- NEW YORKHHS OCRas victim2023-10-26
Greater Rochester Independent Practice Association, Inc. (NY) reported to HHS on 2023-10-26 a Hacking/IT Incident affecting 279,156 individuals. A software application exposed PHI including names, dates of birth, addresses, claims information, and other treatment information stored on a Network Server. The CE notified HHS, affected individuals, and the media, provided substitute notice, and offered complimentary credit monitoring. Additional administrative, technical, and security safeguards were implemented.
- Massachusetts State AGas victim2023-10-10
Greater Rochester Independent Practice Association, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-10. 22 Massachusetts residents were affected. The report records the breach type as paper.
- New Hampshire State AGas victim2023-10-10
Greater Rochester Independent Practice Association, Inc. (GRIPA) notified the NH Attorney General of a MOVEit exploit incident. GRIPA discovered the global MOVEit attack on May 31, 2023, stopped access, and determined files were exfiltrated. Two NH residents were notified on Oct 5, 2023. Personal information was impacted. GRIPA patched the system, restored from backups, and offered 12 months of credit monitoring.
- Indiana State AGas victim2023-10-05
Greater Rochester Independent Practice Association, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-28 and was reported on 2023-10-05. 5 Indiana residents were affected. 1,742 individuals affected in total.
- Maine State AGas victim2023-10-05
Greater Rochester Independent Practice Association, Inc. experienced an external system breach that was discovered on May 31, 2023. The breach, which occurred on May 28, 2023, affected 1,742 individuals and compromised names and Social Security numbers. The organization provided written notification to those affected and offered 12 months of credit monitoring and identity restoration services through IDX.
- Montana State AGas victim2023-10-05
Greater Rochester Independent Practice Association, Inc. (GRIPA) notified Montana residents of a data breach involving the MOVEit file transfer tool. GRIPA learned of a global attack on May 31, 2023, confirmed data exfiltration on June 5, 2023, and identified impacted personal information (names) by August 14, 2023. GRIPA patched the software, restored servers, and offered identity theft protection.
- GLOBALLeak Siteas victim2023-07-12
Greater Rochester Independent Practice Association – GRIPA
- Illinois State AGas victim2023-01-01
GREATER ROCHESTER PRACTICE ASSOCIATION, INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-697). The register records the breach as discovered on May 31, 2023. Additional entities named: MOVEIT. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2021-08-10
gripa.org