MedReview, Inc. is a healthcare data company that provides medical records and billing services to healthcare providers. The breach involved the personal information of over 1.5 million individuals, including names, addresses, dates of birth, Social Security numbers, and medical records. The breach occurred due to a phishing attack that targeted MedReview’s employees.

The filing states that the breach was caused by a “sophisticated” cyberattack. This attack targeted MedReview’s cloud-based infrastructure, specifically its data storage systems. The attackers exploited a vulnerability in the software used to manage the data storage systems, allowing them to gain unauthorized access to the data.

MedReview, Inc. is a healthcare information technology company that provides a range of services, including medical billing, coding, and claims processing. They also offer a platform for healthcare providers to manage their patient data. MedReview’s data security incident involved a ransomware attack.