MedReview reports a data breach exposing sensitive consumer information

MedReview, Inc., a New York-based healthcare auditing and consulting firm, filed a notice of data breach with the Massachusetts Attorney General’s office. The company revealed that an unauthorized party had gained access to its computer network, compromising sensitive consumer data. The breach, first discovered on September 5, 2024, allowed the unauthorized entity to access various personal information, including names, addresses, birth dates, Social Security numbers, salary ranges, and 401(k) account balances.

MedReview’s internal investigation confirmed that the breach impacted a significant portion of its client base, exposing confidential information stored on its network. Upon discovery, the company took immediate steps to contain the breach and assess the scope of the compromised data. While the specific details of the attack have not been fully disclosed, MedReview has initiated the process of notifying affected individuals.

Consumers affected by the breach began receiving notification letters on September 19, 2024, informing them of the incident and the nature of the personal data that may have been exposed. These letters provide a detailed account of the compromised information for each individual.

The breach potentially exposes victims to risks of identity theft and financial fraud. Those impacted are urged to take precautions, including monitoring their credit reports and financial statements for suspicious activity. MedReview has not yet provided details on whether credit monitoring services will be offered as a protective measure.

MedReview, a New York County Health Services Review Organization (NYCHSRO) subsidiary, provides auditing and compliance consulting services to healthcare providers. The company employs over 195 people and generates an annual revenue of approximately $29 million.