Medusind Data Breach Impacts 360,934 Individuals

On December 29, 2023, Medusind, Inc., a revenue cycle management company specializing in medical and dental billing, discovered suspicious activity within its IT network.

The company took affected systems offline and initiated an investigation with the help of a leading cybersecurity forensic firm. It was determined that a cybercriminal had accessed and potentially obtained a copy of certain files containing sensitive personal information.

The breach impacted 360,934 individuals in the United States, including 11,182 individuals in Texas, 1,023 in Maine, and 2,492 in South Carolina.

The exposed information varied by individual but included a wide range of sensitive data, such as:

• Name
• Address
• Social Security number
• Driver’s license number
• Government-issued ID number (e.g., passport, state ID card)
• Financial information (e.g., bank account numbers, credit or debit card numbers)
• Medical information (e.g., medical history, medical record numbers, prescription details)
• Health insurance information (e.g., insurance policy numbers, claims/benefits information)
• Date of birth
• Contact information (e.g., email, phone number)

The breach was disclosed to the Maine Attorney General, Texas Attorney General, and South Carolina Attorney General on January 8, 2025. Medusind began notifying affected consumers by U.S. mail and publication in print media on January 7, 2025.

Medusind's response

Medusind is offering two years of complimentary identity monitoring services through Kroll, a global leader in risk mitigation and response.

Affected individuals can activate these services by visiting Kroll’s enrollment website and using the membership number provided in their notification letter. The activation deadline is specified in the notification letter.