Breachesby GlyphMedusind
Disclosed Jan 7, 2025701,475 affectedSettled
Medical billing firm Medusind discloses breach of patient data
Medusind detected suspicious activity in December 2023 and in January 2025 notified people that files with health, insurance, payment and government ID data had been copied. It first reported 360,934 affected to Maine; the HHS total later rose to 701,475, and it settled class claims for $5 million.
What is known
| People affected | 701,475 (as reported to HHS) |
|---|---|
| Disclosed | Jan 7, 2025 |
| Discovered | Dec 29, 2023 |
| Happened | Dec 29, 2023 |
| Attack | Hacking |
| Data exposed | NamesGovernment IDsHealthInsuranceCredentials and tokensBiometricsSocial Security numbersFinancialPayment cards |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | $5M class action settlement |
Sources
California Attorney General breach notice: MedusindWashington Attorney General breach notice: MedusindNotice letter filed with the Delaware DOJ: MedusindOregon DOJ breach notice: MedusindHHS OCR breach report: Medusind (Business Associate, FL)Medical billing firm Medusind discloses breach affecting 360,000 peopleJanuary 2025 Healthcare Data Breach ReportLargest Healthcare Data Breaches of 2025Indiana Attorney General 2025 data breach report: Medusind
Notices filed
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
confirmed to settledby seedSource
empty to $5M class action settlementby seedSource
ransomware to hackingby seedSource
["names","government-id","health","insurance","credentials","biometrics"] to ["names","government-id","health","insurance","credentials","biometrics","ssn","financial","payment-card"]by seedSource
empty to Medusind detected suspicious activity in December 2023 and in January 2025 notified people that files with health, insurance, payment and government ID data had been copied. It first reported 360,934 affected to Maine; the HHS total later rby seedSource
empty to Medical billing firm Medusind discloses breach of patient databy seedSource
empty to hhsby backfillSource
empty to 701475by backfillSource
[] to ["names","government-id","health","insurance","credentials","biometrics"]by backfillSource
other to healthby backfillSource
unknown to ransomwareby backfillSource
empty to 2023-12-29by backfillSource
2025-02-11 to 2025-01-07by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.