“The incident occurred on August 20, 2023, but it took MNGI almost one year to determine that personal and protected health information was accessed.”
The haul includes Social Security numbers, passports, biometric data, medical records, card numbers and passwords for 765,937 people. Alphv/BlackCat claimed the hack in September 2023. MNGI took until July 2024 to start mailing letters, and still says it has no evidence of misuse. The ransomware gang told the public eleven months before the clinic told its patients.