Skip to Main Content

Arkansas Total Care MRIoA Breach

Date: 02/17/22

One of our vendors, the Medical Review Institute of America (MRIoA) recently experienced a data breach. Some of our members’ information was involved. If your information was part of this breach, MRIoA sent you a letter with instructions on how to proceed. A portion of that letter is posted below for reference.

Note: If your information was involved, please refer to the letter that MRIoA sent you to activate your free credit monitoring.

From the Medical Review Institute of America:

 

At the Medical Review Institute of America (“MRIoA”), we value the privacy of your information. We are writing to let you know about a cyber-attack. This incident involved your information.

Why Does MRIoA Have My Information

Arkansas Total Care uses MRIoA to review health care services you request or receive.

What Happened

On November 9, 2021, we learned that we were the victim of a cyber-attack. On November 12, 2021, we learned the attacker was able to take information in our system. Once we found out, we took steps to secure our systems. We also began an investigation. We hired a cyber security firm and notified law enforcement.  We also took steps to get the information back and confirm it was deleted.

What Information Was Involved

The information involved included your name and one or more of the following:

  • Address
  • Date of birth
  • Social security number
  • Insurance ID number
  • Health information, such as your medical condition(s) and treatment

 

What We Are Doing

We have taken the following actions in response to this incident:

  • We quickly started our incident response plan.
  • We reviewed the files involved so we could quickly notify members.
  • We took steps to improve our system security.
  • We are working with law enforcement, including the United States Federal Bureau of Investigation (FBI).
  • We are giving you credit monitoring services at no charge.

What You Can Do

We have no reason to believe that your information was used incorrectly. However, we want to be careful.  Please review the steps below you can take to protect your information.

We are giving affected members one year of free identity protection service from Kroll.  This service gives you protection from identity theft and fraud. Kroll will help you fix issues if your identity is used.

Review the “Other Important Information” reference guide at the end of this letter. It has steps you can take to help protect yourself. It details how to place a fraud alert or a security freeze on your credit file.

Keep a copy of this letter for your records. This helps in case of any future problems with your health plan benefit or other records.  Regularly review any statements you receive about your health plan benefits.

For More Information

Your personal information is important to us. We regret any concerns this incident has caused you.

For more information, or if you have any questions, please call the helpline at 1-888-653-0511. The call center is open 8:00 am to 8:00 pm Eastern time, Monday through Friday.

Sincerely yours,

Ron Sullivan
President/CEO