PracticeMax

PracticeMax, a healthcare technology provider, disclosed a ransomware attack on April 17, 2021, affecting approximately 165,698 individuals. The incident involved the Medusa ransomware family, which encrypted patient data on a server and resulted in the exfiltration of sensitive information including names, Social Security numbers, and health records. Notifications were sent to the FBI, HHS, and affected individuals starting in October 2021, with written notices continuing through June 2022.

Affected (this filing):

PracticeMax, a business management and IT solutions provider, disclosed a ransomware incident affecting its network from April 17, 2021, to May 5, 2021. The attack encrypted data and allowed unauthorized access to one server and limited email accounts. While no confirmed data disclosure was found, systems may have contained PII, PHI, SSNs, and financial data. PracticeMax disconnected systems, engaged forensic specialists, notified law enforcement, and offered one year of identity monitoring via Kroll.