IMX Medical Management Services

IMX Medical Management Services, Inc. discovered malware on a laptop in September 2022, with indicators possibly dating to June 2022. A threat actor accessed email bodies and server folders containing PHI and PII for claimants, employees, and providers through October 2022. IMX took systems offline, engaged forensics, notified law enforcement, and migrated to a new network operated by parent company QTC. No evidence of exfiltration was confirmed, but access to email bodies occurred.

IMX Medical Management Services reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-27. The breach occurred from 6/1/2022 to 9/1/2022. 3 Montana residents were affected.

Affected (this filing): 3

IMX Medical Management Services, Inc. disclosed a security incident discovered on September 1, 2022, involving malware on a single laptop as early as June 2022. A threat actor gained access to IMX systems through October 2022. The incident potentially exposed personal and protected health information of employees, providers, and claimants. IMX took systems offline, engaged in forensic investigation, notified law enforcement, and migrated operations to a new QTC-operated network. Affected individuals were offered two years of credit monitoring.

IMX Medical Management Services, Inc. disclosed a security incident discovered on September 1, 2022, involving malware on a laptop as early as June 2022. The threat actor accessed certain IMX systems and devices through October 2022, gaining access to email bodies and server folders containing personal and protected health information of claimants. IMX took systems offline, engaged in forensic investigation, and notified law enforcement. The company established a new network via parent company QTC Management, Inc., and offered two years of credit monitoring to affected individuals.