Merritt Healthcare Advisors

Merritt Healthcare Advisors, also known as Merritt Advisors, is a healthcare advisory firm headquartered in the United States. It provides consulting and advisory services to healthcare organizations, focusing on operational, financial, and compliance matters. The firm serves clients across the healthcare sector, including providers, payers, and related entities. Its work involves handling sensitive client information, including personal and health data.

The firm specializes in healthcare advisory services, requiring expertise in healthcare regulations such as HIPAA. Its handling of protected health information necessitates compliance with federal privacy and security standards. The July 2022 incident highlighted the firm's responsibility to safeguard client data and triggered regulatory notification obligations. This event underscored the importance of robust email security controls within its environment.

No explicit information about ownership or parent/subsidiary relationships is available in the provided sources. Therefore, details regarding its corporate structure remain unspecified. The firm operates as an independent advisory entity based in the United States. No further structural details are disclosed.

On July 30, 2022, Merritt Healthcare Advisors experienced unauthorized access to an employee email account that persisted for over a month. The breach exposed personal and health information of more than 77,000 individuals. Discovery occurred months after the initial intrusion, prompting the organization to issue notifications and offer credit monitoring and identity theft protection services. The incident was reported to relevant regulatory authorities as required by law.

The incident illustrates how email-based attacks can remain undetected for extended periods, amplifying potential harm. It underscores the necessity of multi-factor authentication and monitoring for anomalous access patterns. Healthcare organizations that handle protected health information must consider such threats in their risk assessments. Ongoing employee training and incident response planning are critical components of a resilient security posture.