Medical Review Institute of America (MRIoA) experienced a sophisticated cyber-attack on November 9, 2021, involving unauthorized acquisition of protected health information (PHI), including names, SSNs, medical history, and insurance details. The breach occurred on November 2, 2021. MRIoA engaged forensic experts, notified the FBI, and confirmed deletion of stolen data. Remediation included enhanced monitoring, new servers, and MFA. Identity monitoring was offered to affected individuals.