Major US medical billing firm breached, 360K+ customers' healthcare data leaked

Medusind, a US-based medical and dental billing and revenue cycle management company, has suffered a data breach, impacting hundreds of thousands of customers.

The medical billing firm responsible for serving thousands of healthcare providers disclosed a data breach affecting upwards of 360,000 people.

The data types impacted include:

• Health insurance and billing information (i.e., insurance policy numbers or claims/benefits information)
• Payment information (debit/credit card numbers or bank account information)
• Health information (medical history, medical record numbers, or prescription information)
• Government identification (Social Security numbers, taxpayer IDs, driver’s licenses, or passport numbers)
• Dates of birth
• Email addresses
• Phone numbers

However, the information impacted does vary from person to person.

Individual healthcare data can be sold for hundreds of dollars on dark web forums.

For example, malicious actors can use medical details to commit medical identity theft, a type of fraud where threat actors use stolen information to submit forged claims to Medicare and other health insurers.

Meanwhile, other personally identifiable information (PII) may be used to commit fraud, from identity theft and phishing attacks to opening new credit accounts, making unauthorized purchases, or obtaining loans under false pretenses.

Medusind discovered suspicious activity within its network on December 29th, 2023. The medical billing firm took its systems offline and hired cybersecurity experts to investigate the breach.

The investigation revealed that “certain files containing personal information” were copied by the threat actors.

The firm is offering affected individuals 24 months of complimentary credit monitoring and identity protection services via Kroll. This includes credit monitoring, fraud consultation, and identity restoration services.

Cybernews has reached out to Medusind for more information.

Medusind is based in Miami, Florida, and has locations in six states across North America and three cities in India. The medical billing company has 3,000 employees and provides services for 6000 healthcare providers.