Information About a HIPAA Breach with Business Partner
Date: 01/10/22
Superior HealthPlan received a notice from our vendor, Medical Review Institute of America (MRIoA), that it had a cyber incident. This incident involved information from 448 members. We take the privacy and security of your information very seriously. We sincerely regret any concern this may cause you.
Why Does MRIoA Have Member Information
Superior HealthPlan uses MRIoA to review health-care services you request or receive.
What Happened
On November 9, 2021, MRIoA learned that they were the victim of a cyber-attack. On November 12, 2021, MRIoA learned the attacker was able to take information in their system and MRIoA informed Superior that some of our member information was involved in the cyber-attack. Upon learning of the cyber incident, MRIoA took steps to secure their systems and began an investigation. MRIoA hired a cyber security firm and notified law enforcement. MRIoA also took steps to get the information back and confirm it was deleted.
What Information Was Involved
If your information was involved, a letter would have been sent to you with more information. The member information involved in this incident included member name and one or more of the following types of information:
- Address
- Date of birth
- Social security number
- Insurance ID number
- Health information, such as your medical condition(s) and treatment
What MRIoA Is Doing
MRIoA has taken the following actions in response to this incident:
- Upon learning of this incident, MRIoA quickly started their incident response plan.
- MRIoA reviewed the files involved so they could quickly notify members.
- MRIoA took steps to improve their system security.
- MRIoA a working with law enforcement, including the United States Federal Bureau of Investigation (FBI).
MRIoA is providing members affected by this incident with credit monitoring services at no charge, and information about identity theft protection.
The security of your information is important to us. We sincerely regret any inconvenience this incident may have caused you. For more information, or if you have any questions about this incident, please call Superior Member Services from 8:00 a.m. – 5:00 p.m., Monday through Friday:
STAR/CHIP: 1-800-783-5386
STAR Health: 1-866-912-6283
STAR Kids: 1-844-590-4883
STAR+PLUS: 1-877-277-9772