Medical Business Management
Disclosed Aug 25, 20215 years ago1,750 affectedConfirmed
Medical Business Management, the business associate (BA), reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 1,750 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, diagnoses, and financial and other treatment information. The BA notified HHS, affected individuals, the media, and posted substitute breach notice on its website. The BA also provided affected individuals with complimentary credit monitoring services. In response to the breach, the BA implemented additional technical safeguards to better protect PHI. OCR provided the BA with technical assistance regarding the HIPAA Rules.
What is known
| People affected | 1,750 (as reported to HHS) |
|---|---|
| Disclosed | Aug 25, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Medical Business Management (Business Associate, AL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 25, 2021 | 1,750 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.