Regal Medical Group, Inc.

Regal Medical Group, Inc. experienced a ransomware cyberattack resulting in unauthorized access and exfiltration of patient data. The breach occurred on or about December 1-2, 2022, and was discovered on December 8, 2022. Affected data includes names, SSNs, dates of birth, addresses, diagnoses, treatments, lab results, and prescription data. The organization engaged third-party vendors, notified law enforcement and regulators (HHS, CA AG), and offered one year of credit monitoring.

Regal Medical Group, Inc. (“RMG”) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-04-11. The breach occurred during 12/1/2022 - 12/2/2022. The breach was discovered on 12/8/2022. 3,685,626 individuals were affected. Notice was sent on 3/28/2023.

Affected (this filing): 3,685,626

Regal Medical Group, Inc., a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2022-12-02 and filed notice on 2023-04-11. 2,224 Washington residents were affected. 130 days elapsed between awareness and notification. 1 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 2,224