Medical Billing Specialists Data Breach Details
MBS first detected a network disruption on February 17, 2024, and immediately took steps to secure its systems while launching an investigation with cybersecurity experts. By December 13, 2024, after extensive data analysis, the company confirmed that certain files containing personal information had been compromised.
Notably, the Akira ransomware gang claimed responsibility for the attack, adding MBS to its dark web leak site on March 6, 2024. The group alleged that it had stolen over 120GB of sensitive data, including employee and patient records, addresses, Social Security numbers, medical details, background checks, emails, and internal communications.
To support affected individuals, MBS is offering two years of complimentary credit monitoring through a single-bureau credit reporting service. These services will notify users of any changes to their credit files in real time.
What Information Was Compromised?
While MBS has not found evidence of misuse, it acknowledges that an unauthorized party may have acquired various personal and medical details. The exposed data could include:
- Full names
- Dates of birth
- Social Security numbers
- Medical treatment records and locations
- Patient ID numbers
- Medicare/Medicaid numbers
- Health insurance details
- Financial account or payment information