MedRevenu Data Breach
The 2024 MedRevenu data breach involved a security incident at the health-care billing company in which certain files may have been acquired without authorization. MedRevenu said it discovered a network disruption on or about December 12, 2024.
Exposed Data Types
2 sensitive9- Medical information
- Health insurance information
- Names
- Dates of birth
- Social security numbers
- Driver's licenses
- Government issued IDs
- Financial account information
- Credit card numbers
About This Breach
MedRevenu provides revenue-cycle management and medical-billing services to health-care organizations. The public consumer notice identifies current and former patients of client Inland Physicians Hospitalist Services among the affected people.
When did the breach occur?
According to the official letter, the network disruption was detected on or about December 12, 2024. The investigation determined that certain files may have been acquired without authorization. Electronic discovery to identify the affected records concluded on October 21, 2025, and the consumer letters are dated February 3, 2026.
What information may have been affected?
Depending on the individual, the information may have included names, dates of birth, Social Security numbers, driver's-license or other government-identification numbers, health-insurance and medical information, financial-account numbers, payment-card numbers and access information. Not every category applied to every person.
How many people were affected?
The current U.S. Department of Health and Human Services breach record reports 17,775 affected individuals.
What did the organization do?
MedRevenu said it secured the network, investigated with cybersecurity specialists and reviewed its technical safeguards. At the time of notice, it said it had no evidence that personal information had been misused and offered complimentary credit monitoring to eligible people.
What should affected people do?
Notice recipients should review credit reports, payment cards, bank accounts and health-insurance statements for unfamiliar activity. People whose Social Security or financial information was involved may also wish to consider a credit freeze or fraud alert.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
