Breachesby GlyphMedical Management Resource Group
Disclosed Feb 6, 20242,264,157 affectedConfirmed
The business associate (BA), Medical Management Resource Group, reported that it experienced a cyber-attack that affected the protected health information (PHI) of 2,264,157 individuals. The PHI involved included names, dates of birth, addresses, diagnoses, medications, and claims and financial information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA provided complimentary credit monitoring services and implemented new technical safeguards.
What is known
| People affected | 2,264,157 (as reported to HHS) |
|---|---|
| Disclosed | Feb 6, 2024 |
| Discovered | Nov 14, 2023 |
| Happened | Nov 14, 2023 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Washington Attorney General breach notice: Medical Management Resource GroupVermont Attorney General: 2024-02-15 Medical Management Resource Group, LLC dba American Vision Partners Data Breach Notice to ConsumersHHS OCR breach report (archive, resolved): Medical Management Resource Group (Business Associate, AZ)
Notices filed
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 2264157by backfillSource
empty to The business associate (BA), Medical Management Resource Group, reported that it experienced a cyber-attack that affected the protected health information (PHI) of 2,264,157 individuals. The PHI involved included names, dates of birth, addrby backfillSource
empty to https://ago.vermont.gov/document/2024-02-15-medical-management-resource-group-llc-dba-american-vision-partners-data-breach-noticeby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.