Medical Review Institute of America (MRIoA) experienced a sophisticated cyber-attack discovered on November 9, 2021. The incident involved the unauthorized acquisition of protected health information (PHI), including demographic data, SSNs, clinical records, and financial information. MRIoA engaged forensic experts, notified the FBI, and confirmed deletion of the stolen data. The company implemented enhanced security measures and offered one year of identity monitoring to affected individuals.