The MHMR Authority of Brazos Valley suffered a data breach on November 5, 2022, caused by hacking, compromising the personal information of 83,245 individuals, including eight Maine residents. The breach exposed sensitive data, though the exact nature (e.g., financial, medical, or personally identifiable information) was not explicitly detailed in the report. Affected individuals were notified via letters on July 28, 2023, nearly eight months after the incident, and offered 12 months of identity theft protection services through IDX as a remedial measure. The delay in notification and the scale of the breach suggest significant operational and reputational risks, particularly given the involvement of a health and human services authority, which typically handles highly sensitive client data. The incident underscores vulnerabilities in cybersecurity defenses, potentially eroding trust among patients, partners, and regulatory bodies.
TPRM report: https://www.rankiteo.com/company/tri-county-mhmr-svc
"id": "tri402090725",
"linkid": "tri-county-mhmr-svc",
"type": "Cyber Attack",
"date": "11/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 83245,
'industry': 'Healthcare',
'location': 'Brazos Valley, Texas, USA',
'name': 'MHMR Authority of Brazos Valley',
'type': 'Healthcare / Mental Health Authority'}],
'attack_vector': 'Hacking',
'customer_advisories': 'Identity theft protection services offered for 12 '
'months via IDX',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 83245,
'personally_identifiable_information': True},
'date_detected': '2022-11-05',
'description': "The Maine Attorney General's Office reported that the MHMR "
'Authority of Brazos Valley experienced a data breach on '
'November 5, 2022, involving hacking. The breach potentially '
'affected 83,245 individuals in total, including eight Maine '
'residents. Notification letters were sent out to the affected '
'individuals on July 28, 2023, and identity theft protection '
'services were offered for 12 months through IDX.',
'impact': {'data_compromised': True, 'identity_theft_risk': True},
'references': [{'source': "Maine Attorney General's Office"}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
"General's Office "
'notified'},
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals (July 28, 2023)',
'third_party_assistance': True},
'title': 'MHMR Authority of Brazos Valley Data Breach (2022)',
'type': 'Data Breach'}