Private personal medical and financial data of 9 million MCNA patients was stolen, exposed, and offered for sale on the dark web in the wake of a massive May 2023 data breach

Lieff Cabraser’s cybersecurity team is investigating reports of a serious medical data breach affecting Managed Care of North America Inc. (“MCNA”), a Florida-based managed care organization and insurer focusing on dental care.

In May 2023, MCNA announced it had suffered from a total data breach at the hands of a criminal ransomware group that put the personal, private and highly-sensitive medical information of nearly 9 million customers on the so-called “dark web,” where it could be accessed and shared illegally and without any government or other protective scrutiny. The data purportedly includes names, address, Social Security numbers, and treatment information, as well as detailed billing and claims information.

When MCNA declined to pay the demanded $10 million ransom, Russian hacker group Lockbit began offering and selling all the information MCNA had on file for the nearly 9 million affected persons. Based on examinations of the exposed data, the breach affects patients across the U.S., but there is a notable focus on individuals within the state of New York.

If you suspect that you or a family member have had your data stolen and exposed as a result of the massive MCNA patient data breach, we urge you to use the form below to contact a data privacy lawyer at Lieff Cabraser today for help. There is no fee or cost for our review of your potential case, and the information you provide will help us hold MCNA accountable for its failure to properly secure and protect your confidential medical and financial data.

Lieff Cabraser’s Privacy & Cybersecurity practice group is a nationally-recognized leader in the pursuit of preserving people’s privacy against the pervasive intrusions of digital technology into all aspects of our daily lives. We have a proven track record of successfully taking on the powerhouses of Big Data and social media. The Privacy & Cybersecurity practice group’s honors include the National Law Journal’s 2019 Elite Trial Lawyers award for privacy and data breach litigation and Law360’s 2017 Data Privacy Practice Group of the Year.