Medical Management Resource Group
Disclosed Feb 6, 20242 years ago2,264,157 affectedConfirmed
The business associate (BA), Medical Management Resource Group, reported that it experienced a cyber-attack that affected the protected health information (PHI) of 2,264,157 individuals. The PHI involved included names, dates of birth, addresses, diagnoses, medications, and claims and financial information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA provided complimentary credit monitoring services and implemented new technical safeguards.
What is known
| People affected | 2,264,157 (as reported to HHS) |
|---|---|
| Disclosed | Feb 6, 2024 |
| Discovered | Nov 14, 2023 |
| Happened | Nov 14, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Medical Management Resource Groupatg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-02-15 Medical Management Resource Group, LLC dba American Vision Partners Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Medical Management Resource Group (Business Associate, AZ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Feb 6, 2024 | 4,482 |
| HHS archivetotal | Feb 6, 2024 | 2,264,157 |
| Vermont AGresidents of VT | Feb 15, 2024 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2264157 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Medical Management Resource Group, reported that it experienced a cyber-attack that affected the protected health information (PHI) of 2,264,157 individuals. The PHI involved included names, dates of birth, addr · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-02-15-medical-management-resource-group-llc-dba-american-vision-partners-data-breach-notice · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.