Rise Interactive Media & Analytics, LLC

Rise Interactive Media & Analytics, LLC, a digital marketing agency based in Chicago, Illinois, experienced a data breach that was first identified on November 14, 2022. The breach affected the personal and health information of patients from RGH Enterprises, Inc., doing business as Edgepark Medical Supplies, which is a leading supplier of medical products and services[1][3].

The compromised data included patients’ names, email addresses, phone numbers, provider information, diagnoses, expected delivery dates, and health insurance information. Importantly, Social Security numbers, financial account information, and payment card information were not involved in this incident[3]. As of the information available, there have been no reports of improper use of the information as a direct result of this incident[3].

Rise Interactive reported the incident to law enforcement and began an investigation with outside cybersecurity professionals. On December 5, 2022, Rise Interactive informed Edgepark Medical Supplies about the breach. Subsequently, on February 3, 2023, Edgepark Medical Supplies began mailing letters to the individuals whose information was contained in the potentially accessed file[3].

The breach has led to legal action against Rise Interactive Media & Analytics, with a proposed class action lawsuit filed over the incident. The lawsuit alleges that Rise Interactive failed to employ reasonable cybersecurity measures to protect consumers’ sensitive data. The plaintiff in the case reported that an unknown individual had attempted to fraudulently fill a prescription using her health insurance, suggesting that the information may have been traded on the dark web[7].

Rise Interactive Media & Analytics is a part of Quad, a larger media services provider located in Sussex, Wisconsin. Rise Interactive employs more than 229 people and generates approximately $117 million in annual revenue, while Quad employs over 15,000 people and generates $3.2 billion in annual revenue[1].

Affected patients have been encouraged to review statements from their health insurers and contact them immediately if they see any services they did not receive. Rise Interactive and Edgepark have expressed that the privacy and security of personal information are of the utmost importance to them and that they continually evaluate and modify their practices and internal controls to safeguard the security and privacy of personal information[3].

Citations:

1. https://www.jdsupra.com/legalnews/rise-interactive-media-analytics-llc-6254319/
2. https://www.riseinteractive.com/privacy-policy
3. https://www.riseinteractive.com/getmedia/ac2bb6e3-99be-4d34-811f-8347d2c89630/EdgeparkData.pdf
4. https://law.justia.com/cases/federal/district-courts/illinois/ilndce/1:2023cv01836/431679/24/
5. https://www.hipaajournal.com/rise-interactive-media-analytics-sued-over-edgepark-medical-supplies-data-breach/
6. https://www.databreaches.net/edgepark-medical-supplies-notifies-patients-of-rise-interactive-media-analytics-data-breach/
7. https://www.classaction.org/news/rise-interactive-facing-class-action-over-data-breach-affecting-over-50k-edgepark-medical-supplies-patients
8. https://www.law.com/radar/card/roper-v-rise-interactive-media–analytics-llc-48254348-1/
9. https://www.hipaajournal.com/rise-interactive-media-analytics-dothouse-health-and-reventics-hacked/