On February 17, 2024, Medical Billing Specialists, Inc. (MBS) experienced a data breach that has potentially impacted the personal information of individuals whose data was managed by the company. The breach involved unauthorized access to files, which may have been acquired by an unknown third party.
After a thorough investigation, which concluded on December 13, 2024, it was determined that sensitive personal information was present in the compromised dataset.
The information that may have been exposed include a range of PHI and PII like medical treatment information and social security numbers, among other types of personal data.
In response to the breach, MBS has taken several steps to address the issue and protect affected individuals. Immediately following the discovery of the network disruption, the company secured its network environment and engaged cybersecurity experts to conduct a comprehensive investigation. As part of their ongoing efforts to prevent similar incidents, MBS has been reassessing its technical safeguards and implementing new security measures.
To assist those potentially affected, MBS is offering complimentary credit monitoring and identity theft protection services through Cyberscout, a TransUnion company. These services include Single Bureau Credit Monitoring, Credit Reports, and Credit Scores, which will alert individuals to changes in their credit files for twenty-four months from the date of enrollment. Additionally, proactive fraud assistance is available to help address any concerns or incidents of fraud.
Affected individuals are encouraged to enroll in these services by visiting Cyberscout's activation page and using the unique code provided in their notification letter. Enrollment must be completed within 90 days from the date of the notification letter.
For those affected by the breach, it is crucial to remain vigilant and monitor accounts for any suspicious activity. Taking advantage of the offered credit monitoring services and following the recommended steps can help mitigate potential risks associated with the data breach. For further details, the disclosure on the Massachusetts Attorney General's website provides additional information.