R1 RCM

R1 RCM Inc., one of the nation’s largest medical debt collection companies, had been hit by a ransomware attack.

R1 RCM had to take down its systems.

Compromised information included patient registration, insurance, and benefits verification, medical treatment documentation, and bill preparation and collection from patients.

The company has access to a wealth of personal, financial, and medical information on tens of millions of patients, including names, dates of birth, Social Security numbers, billing information, and medical diagnostic data.

Source: https://krebsonsecurity.com/2020/08/medical-debt-collection-firm-r1-rcm-hit-in-ransomware-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/r1-rcm

"id": "r1r145229123",
"linkid": "r1-rcm",
"type": "Ransomware",
"date": "08/2020",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'tens of millions of patients',
                        'industry': 'Healthcare',
                        'name': 'R1 RCM Inc.',
                        'size': 'Large',
                        'type': 'Medical Debt Collection Company'}],
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'dates of birth',
                                                         'Social Security '
                                                         'numbers',
                                                         'billing information',
                                                         'medical diagnostic '
                                                         'data'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['personal',
                                              'financial',
                                              'medical']},
 'description': 'R1 RCM Inc., one of the nation’s largest medical debt '
                'collection companies, had been hit by a ransomware attack. '
                'The company had to take down its systems. Compromised '
                'information included patient registration, insurance, and '
                'benefits verification, medical treatment documentation, and '
                'bill preparation and collection from patients. The company '
                'has access to a wealth of personal, financial, and medical '
                'information on tens of millions of patients, including names, '
                'dates of birth, Social Security numbers, billing information, '
                'and medical diagnostic data.',
 'impact': {'data_compromised': ['patient registration',
                                 'insurance',
                                 'benefits verification',
                                 'medical treatment documentation',
                                 'bill preparation and collection'],
            'downtime': 'The company had to take down its systems'},
 'title': 'Ransomware Attack on R1 RCM Inc.',
 'type': 'Ransomware Attack'}