Morley Companies, Incorporated

Morley Companies, Inc. reported to HHS on 2022-02-01 a Hacking/IT Incident affecting 659,194 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, SSNs, and treatment data. The entity provided credit monitoring and implemented security safeguards.

Affected (this filing): 659,194

Morley Companies, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-02-08. The breach occurred during 7/20/2021 - 9/2/2021. The breach was discovered on 1/20/2022. 590,785 individuals were affected. Notice was sent on 2/8/2022.

Affected (this filing): 590,785

Morley Companies, Inc., a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2021-08-01 and filed notice on 2022-03-21. 42,633 Washington residents were affected. 232 days elapsed between awareness and notification. 12 days to identify the breach. 32 days to contain the breach.

Affected (this filing): 42,633

Morley Companies, Inc., a Michigan-based health plan processing firm, experienced a ransomware-type malware attack beginning August 1, 2021, which prevented access to certain files and resulted in unauthorized access to personal information including Social Security numbers. The company discovered the incident, engaged third-party forensic specialists, and confirmed affected individuals in March 2022. IDX credit and identity monitoring services were offered for 24 months.