HealthEC Data Breach Impacted 4.5 Million Patients
In July 2023, HealthEC LLC, a key player in health management solutions, experienced a significant data breach impacting roughly 4.5 million individuals. The breach happened between July 14 and July 23 and exposed a vast array of sensitive data.
Compromised information included personal identifiers like names and Social Security Numbers (SSNs), as well as detailed medical records, diagnoses, and insurance information. The breach affected several healthcare providers and state health systems, notably including Corewell Health and the State of Tennessee’s Division of TennCare.
Responding to the crisis, HealthEC notified clients and affected individuals on October 26, with formal notifications sent out starting December 22, 2023. They reported the breach to the Department of Health and Human Services’ Office for Civil Rights in line with regulatory requirements.
To mitigate the damage and prevent future incidents, HealthEC enhanced its security measures and offered complimentary credit monitoring to those impacted. The company also advised individuals to monitor their credit reports and account statements closely for signs of identity theft or fraud.
The Michigan Attorney General, among others, has called for stricter legislation mandating prompt notifications in the event of data breaches.
Related Posts:
- What EDR Platforms Catch: A Quick Breakdown
- Navigating the Impact of EO 14028
- 11 Essential Red Team Tools for Cybersecurity Professionals
- AlphaBay: Inside the Infamous Dark Web Marketplace
QUOTE:
"Amateurs hack systems, professionals hack people."