Southwest Healthcare Services Announces Data Breach Affecting Patients’ SSNs and PHI | Console and Associates, P.C.

Southwest Healthcare Services Announces Data Breach Affecting Patients’ SSNs and PHI | Console and Associates, P.C.

On March 31, 2023, Southwest Health care Companies (“Southwest”) filed a observe of details breach with the Montana Lawyer General right after the group uncovered that an unauthorized bash was able to entry confidential client details saved on its laptop or computer method. Dependent on the company’s formal filing, the incident resulted in an unauthorized social gathering gaining accessibility to consumers’ names, dates of birth, addresses, Social Stability numbers, driver’s license quantities, health insurance information and facts and secured overall health data. Just after confirming that customer knowledge was leaked, Southwest commenced sending out information breach notification letters to all people who were being impacted by the new data stability incident.

If you are a latest or previous affected person at Southwest Healthcare Expert services Healthcare facility, it is crucial you realize what is at chance and what you can do about it. As we have beforehand reported, healthcare amenities are becoming the most popular focus on of quite a few hackers owing to the large sum of sensitive info in their possession. For the reason that of this, hackers can often acquire anything they need to dedicate identity theft and other frauds soon after a healthcare info breach, primarily those people involving more substantial hospitals and health care products and services organizations. To learn a lot more about how to safeguard yourself from getting a target of fraud or identification theft and what your authorized options are in the wake of the Southwest Healthcare Services knowledge breach, achieve out to an knowledgeable data breach attorney for aid.

What We Know So Significantly About the Southwest Healthcare Providers Breach

News of the Southwest Healthcare Solutions facts breach is nonetheless clean even so, what we know at this stage comes from the company’s filing with the Montana Legal professional Typical, as very well as a “Notice of Info Protection Incident” posted on the Southwest website. In accordance to this source, recently, Southwest acquired that a poor actor could have obtained accessibility to patients’ shielded well being information. Though the enterprise does not indicate how it acquired of the intrusion, in reaction, Southwest carried out an investigation with the help of outside cybersecurity professionals in hopes of studying extra about the incident and no matter whether any affected person info was jeopardized as a final result.

On January 31, 2023, the Southwest investigation verified that the unauthorized actor was able to obtain certain documents stored on the organization’s laptop or computer network amongst October 28, 2022 and Oct 29, 2023. Subsequently, Southwest discovered that some of these information contained private affected individual details.

On finding that delicate consumer details was built readily available to an unauthorized bash, Southwest Healthcare Expert services began to critique the afflicted data files to identify what information was compromised and which shoppers ended up impacted. While the breached information differs relying on the specific, it might consist of your title, date of delivery, deal with, Social Stability number, driver’s license selection, health and fitness insurance data and secured health and fitness facts.

On March 31, 2023, Southwest Health care Services sent out facts breach letters to all people today whose facts was compromised as a final result of the new facts safety incident.

Additional Details About Southwest Health care Products and services

Southwest Health care Products and services is a non-income healthcare products and services company centered in Bowman, North Dakota. Southwest Health care Services was established in 2001, with the consolidation of St. Luke’s Tri-Condition Hospital and Sunset Treatment Company. Subsequently, Bowman Ambulance Services became a section of Southwest Health care Companies of Bowman in September 2002. The organization also operates Sunrise Village Assisted Dwelling, the Sunset Nursing Property and the Southwest Healthcare Clinic. Southwest Health care Providers employs a lot more than 138 persons and generates around $27 million in yearly income.

Medstar Mobile Healthcare Files Notice of Data Breach Affecting 612k Patients | Console and Associates, P.C.

Southwest Healthcare Services Announces Data Breach Affecting Patients’ SSNs and PHI | Console and Associates, P.C.

On December 19, 2022, Medstar Cellular Health care (“Metropolitan Spot EMS Authority dba MedStar Cellular Healthcare”) filed observe of a data breach with the U.S. Division of Health and Human Services Workplace for Civil Legal rights just after a recent hacking incident targeting the company’s laptop or computer technique compromised private info belonging to selected patients. Primarily based on the company’s formal filing, the incident resulted in an unauthorized celebration getting entry to consumers’ safeguarded wellbeing details. Following confirming that patient knowledge was leaked, Medstar started sending out knowledge breach notification letters to all people today who ended up impacted by the latest details safety incident.

If you at any time relied on products and services provided by Medstar Cell Healthcare, it is attainable that your delicate health care info is now in the palms of a legal actor who hopes to use your facts for their personal reward. As we’ve reviewed in prior posts, cybercriminals have not too long ago proven an enhanced interest in concentrating on healthcare companies owing to the large amount of money of sensitive information and facts these businesses keep on behalf of sufferers. The information hackers get hold of as a result of a healthcare information breach these as this 1 can be employed to commit a large array of frauds, such as healthcare id theft. For that reason, it is vital that any individual who receives a Medstar info breach letter choose all needed measures to guard by themselves from the possibly lifestyle-altering consequences of identity theft. On top of that, dependent on the outcome of the pending investigation, afflicted sufferers may well be equipped to pursue a facts breach class action lawsuit towards Medstar, if the evidence shows that the firm was negligent in how it managed or stored affected individual information.

What We Know So Considerably About the Medstar Cellular Healthcare Breach

The readily available information and facts with regards to the Medstar Mobile Healthcare breach comes from the company’s filing with the U.S. Office of Wellness and Human Solutions Business for Civil Rights (“HHS-OCR”). On the other hand, the HHS-OCR details breach portal only delivers constrained details about the breach, and the corporation has not yet posted see of the incident on its internet site or usually elaborated on what led up to the breach. Therefore, data is presently quite restricted.

Nonetheless, we know that the breach involved a “hacking / IT incident” that specific Medstar’s network servers. Furthermore, mainly because organizations only need to have to file detect of a facts breach with the HHS-OCR if the breach compromised individuals’ guarded wellness details, it is very most likely that this breach included information pertaining to patients’ healthcare.

On discovering that sensitive customer details was produced accessible to an unauthorized get together, Medstar Cell Healthcare began to overview the afflicted data files to identify what information and facts was compromised and which individuals have been impacted.

On December 19, 2022, Medstar Mobile Health care sent out details breach letters to all persons whose data was compromised as a end result of the new information stability incident. In accordance to the U.S. Office of Wellness and Human Providers Business office for Civil Legal rights, the Medstar info breach impacted the private details of 612,000 individuals across the region.

Additional Details About Medstar Cellular Healthcare

Medstar Cellular Health care MedStar Mobile Healthcare is the trade identify for the Metropolitan Space EMS Authority (“MAEMSA”), an unexpected emergency and non-unexpected emergency ambulance service service provider for 15 cities in Tarrant County, which includes Blue Mound, Burleson, Edgecliff Village, Forest Hill, Fort Truly worth, Haltom Town, Haslet, Lakeside, Lake Really worth, River Oaks, Saginaw, Sansom Park, Westover Hills, Westworth Village, and White Settlement. Medstar serves in excess of 436 square miles and far more than 1.1 million residents, responding to above 185,000 calls per calendar year. Medstar was launched in 1986 and is dependent in Fort Worth, Texas. Medstar Cellular Healthcare employs additional than 460 men and women and generates close to $67 million in yearly earnings.

Behavioral Health Group Reports Data Breach Affecting Patients’ Protected Health Information | Console and Associates, P.C.

Southwest Healthcare Services Announces Data Breach Affecting Patients’ SSNs and PHI | Console and Associates, P.C.

On July 27, 2022, Behavioral Wellbeing Team (“BHG”) submitted formal detect of a information breach soon after a “security incident” affecting the company’s pc program resulted in an unauthorized get together remaining in a position to obtain sensitive facts belonging to particular sufferers. According to the BHG, the breach resulted in the next details forms currently being compromised: comprehensive names, Social Protection numbers, driver’s license numbers, state identification figures, economic account facts, payment card facts, passport figures, biometrics, and health and fitness insurance plan data. The breach also exposed patients’ healthcare information, which include healthcare prognosis and treatment method, medicine information, dates of service, and healthcare record quantities. Right after confirming the breach and pinpointing all affected parties, Behavioral Health and fitness Team commenced sending out details breach letters to all impacted get-togethers.

If you obtained a data breach notification, it is essential you comprehend what is at chance and what you can do about it. To study a lot more about how to protect oneself from turning out to be a victim of fraud or id theft and what your legal alternatives are in the wake of the Behavioral Wellness Team information breach, you should see our latest piece on the subject here.

What We Know About the Behavioral Health Group Details Breach

The details about the Behavioral Wellness Team info breach arrives from the company’s formal filing with various point out govt entities as nicely as a see posted on the BHG web-site. Evidently, on an undisclosed date, BHG realized that an unauthorized party may have received accessibility to the company’s computer procedure. In response, BHG secured its network and started performing with outside cybersecurity professionals to investigate the incident.

As a consequence of this investigation, BHG was able to confirm that an unauthorized occasion removed selected documents and folders from the company’s laptop or computer community on December 5, 2021.

On getting that sensitive client details was available to an unauthorized occasion, Behavioral Health Group started reviewing the afflicted documents to establish what details was compromised and which clients have been impacted. When the breached information and facts varies relying on the particular person, it may well include things like your entire title, Social Stability variety, driver’s license or point out identification range, economic account information, payment card facts, passport, biometrics, wellness insurance coverage details and healthcare information and facts, which includes professional medical diagnosis and therapy, treatment details, dates of provider, and health-related report range.

On July 27, 2022, Behavioral Health and fitness Group sent out details breach letters to all men and women whose details was compromised as a result of the recent facts security incident.

A lot more Info About Behavioral Well being Team

Established in 2006, Behavioral Health Team is a program of outpatient opioid procedure and recovery facilities based in Dallas, Texas. BHG operates 117 destinations in 20-four states and focuses on offering treatment-assisted therapy to these who suffer from opioid use disorder. Behavioral Overall health Team employs far more than 1,900 people and generates around $270 million in annual income.

Beware of Data Breaches Affecting Your Secured Health Details

The Behavioral Overall health Group knowledge breach resulted in a wide array of affected person facts ending up in the arms of hackers. In the detect posted on the company’s website, BHG indicates that some of the leaked info was safeguarded well being details. But what is shielded overall health details, and why is it so vital to maintain this facts personal?

Safeguarded wellbeing information is a sort of info that relates to a patient’s earlier, existing or future health affliction. Safeguarded health facts also includes details pertaining to how a patient pays for their health care, this kind of as their insurance policies details or Medicare/Medicaid facts. Having said that, not all healthcare-relevant knowledge falls into the classification of guarded well being data simply because, to be regarded “protected” wellness info, info should include at minimum one identifier. An identifier is an extra piece of information that anybody can use to identify the affected individual. For instance, typical identifiers include things like patients’ names, Social Security numbers and addresses.

While the outcomes of any knowledge breach can have a immensely disruptive influence on your everyday living, the dangers that abide by in the wake of a health care data breach are even extra serious. For example, healthcare identity theft is typically tougher to rectify than purely economical fraud and executing so usually comes at a greater cost to the target in terms of both equally time and cash. Just one reason for this is that hackers who have out these attacks typically provide the shielded overall health info they acquire to a third party, who then seeks healthcare procedure in the victim’s name.

If you fall target to health care identity theft, the provider who rendered care will seem to you to deal with the monthly bill (because, in their brain, you were being the affected individual). However, the a lot more severe risk is that the individual who bought your details from a hacker and acquired healthcare treatment in your title provides health professionals with their individual facts that ends up in your health care record. For illustration, a fraudulent client might give the medical professional their own record of prescription drugs, allergic reactions or past clinical strategies. This information can end up obtaining mixed up with your personal health-related data and can existing a actual issue the future time you go to the health care provider or healthcare facility.

Everyone who has fallen victim to a information breach involving secured well being data must choose the scenario seriously and make sure they do almost everything feasible to mitigate the danger of health care id theft. Speaking with a data breach lawyer is a great very first phase for those people on the lookout to find out much more about what to do in the wake of a health care facts breach and what their possibilities are to keep the firm that leaked their data economically accountable.

Shields Health Care Group, Inc. Announces Data Breach | Console and Associates, P.C.

Southwest Healthcare Services Announces Data Breach Affecting Patients’ SSNs and PHI | Console and Associates, P.C.

On July 22, 2022, Shields Well being Care Team, Inc. submitted an official recognize of a information breach with different state authorities entities after an unauthorized bash acquired access to the company’s personal computer units for a interval of about two months. In accordance to Shields, the breach resulted in the names, entire names, Social Stability numbers, dates of beginning, household addresses, company details, analysis, billing details, insurance policy figures and information, professional medical record numbers, affected individual identification numbers, and other medical or treatment method information and facts of specific individuals being compromised. Right after confirming the breach and figuring out all affected parties, Shields Wellness Treatment Group began sending out info breach letters to all affected get-togethers.

If you been given a knowledge breach notification, it is important you realize what is at hazard and what you can do about it. To master extra about how to secure you from getting to be a sufferer of fraud or id theft and what your legal selections are in the wake of the Shields Well being Treatment Group details breach, be sure to see our new piece on the subject matter listed here.

What We Know About the Shields Health and fitness Treatment Group Info Breach

The info about the Shields Wellbeing Care Team, Inc. knowledge breach comes from the files filed with many state governments as effectively as a notice supplied on the company’s web site. In accordance to the most just lately released info, on March 28, 2022, Shields Wellness Treatment Group was created informed of suspicious action on its computer network. In reaction, the organization engaged 3rd-occasion forensic professionals to investigate the incident in hopes of discovering a lot more about its results in as nicely as whether or not any patient facts was leaked as a consequence.

The company’s investigation unveiled that an unauthorized social gathering attained access to Shields Well being Treatment Group’s laptop or computer procedure on March 7, 2022, and preserved entry right until March 21, 2022. The investigation also verified that the unauthorized celebration stole details from the company’s method.

On discovering that sensitive customer data was stolen by an unauthorized party, Shields Health Care Group then commenced the course of action of examining all impacted documents to decide what information and facts was compromised and which shoppers were being impacted by the incident. While the breached info varies relying on the person, it may perhaps include things like your whole identify, Social Stability range, date of birth, residence deal with, company information, analysis, billing data, coverage variety and information and facts, professional medical report selection, patient identification range, and other medical or remedy info.

On July 22, 2022, Shields Wellbeing Treatment Group despatched out info breach letters to all individuals whose information and facts was compromised as a result of the the latest information stability incident.

Shields Health and fitness Care Group, Inc. describes in its data breach letter that the organization delivers administration and imaging companies on behalf of a variety of wellbeing treatment services. Thus, it seems possible that the unauthorized party was equipped to entry details belonging to clients of any of these affiliate amenities. The record of affiliated amenities supplied by Shields Wellness Care Group consists of:

  • Baystate Well being Urgent Care, LLC

  • Baystate MRI & Imaging Middle, LLC

  • Brighton Imaging Middle, LLC

  • Cape Cod CT Expert services, LLC

  • Cape Cod Imaging Solutions, LLC (a enterprise associate to Falmouth Hospital Association, Inc)

  • Cape Cod PET/CT Companies, LLC

  • Cape Cod Radiation Remedy Support, LLC

  • Central Maine Professional medical Center

  • Emerson Clinic

  • Slide River/New Bedford Regional MRI Restricted Partnership

  • Falmouth Clinic Association, Inc.

  • Franklin MRI Middle, LLC

  • Lahey Clinic MRI Products and services, LLC

  • Massachusetts Bay MRI Limited Partnership

  • Mercy Imaging, Inc.

  • MRI/CT of Providence, LLC

  • Newton-Wellesley MRI Restricted Partnership

  • NW Imaging Administration Firm, LLC (a business affiliate to Newton Wellesley Orthopedic Associates, Inc.)

  • Newton-Wellesley Imaging, Pc

  • Newton Wellesley Orthopedic Associates, Inc.

  • Northern MASS MRI Providers, Inc.

  • PET-CT Providers by Tufts Healthcare Middle and Shields, LLC

  • Shields and Athletics Medication Atlantic Imaging Administration Co, LLC (a business associate SportsMedicine Atlantic Orthopaedics P.A.)

  • Shields CT of Brockton, LLC

  • Shields Imaging at Anna Jaques Clinic, LLC

  • Shields Healthcare of Cambridge, Inc.

  • Shields Imaging at College Healthcare facility, LLC

  • Shields Imaging at York Clinic, LLC

  • Shields Imaging Administration at Emerson Medical center, LLC (a organization associate to Emerson Medical center)

  • Shields Imaging of Japanese Mass, LLC

  • Shields Imaging of Lowell Common Hospital, LLC

  • Shields Imaging of Portsmouth, LLC

  • Shields Imaging with Central Maine Health, LLC (a enterprise associate to Central Maine Healthcare Center)

  • Shields Administration Enterprise, Inc.

  • Shields MRI & Imaging Center of Cape Cod, LLC

  • Shields MRI of Framingham, LLC

  • Shields PET/CT at CMMC, LLC

  • Shields PET_CT at Berkshire Medical Centre, LLC

  • Shields PET-CT at Cooley Dickinson Healthcare facility, LLC

  • Shields PET-CT at Emerson Hospital, LLC

  • Shields Radiology Associates, Computer

  • Shields Signature Imaging, LLC

  • Shields Durable PET-CT, LLC

  • Shields-Tufts Medical Heart Imaging Administration, LLC (a business associate to Tufts Clinical Middle, Inc.)

  • South Shore Regional MRI Restricted Partnership

  • Southeastern Massachusetts Regional MRI Limited Partnership

  • SportsMedicine Atlantic Orthopaedics P.A.

  • Tufts Health care Middle, Inc.

  • UMass Memorial HealthAlliance MRI Middle, LLC

  • UMass Memorial MRI – Marlborough, LLC

  • UMass Memorial MRI & Imaging Center, LLC

  • Winchester Medical center / Shields MRI, LLC

  • Radiation Therapy of Southeastern Massachusetts, LLC

  • Radiation Remedy of Winchester, LLC

  • South Suburban Oncology Center Restricted Partnership

  • Shields Imaging of North Shore, LLC

More Info About Shields Wellness Treatment Group, Inc.

Based in Brighton, Massachusetts, Shields Health Treatment Group, Inc. is a health care organization that delivers a array of companies to people throughout New England. A lot more especially, Shields features MRI, PET/CT, and ambulatory surgical expert services to patients at extra than 40 areas in Massachusetts and Maine. Shields Wellbeing Treatment Group employs much more than 754 folks and generates roughly $200 million in annual profits.

Protected Well being Information Is a Popular Concentrate on for Hackers

The Shields Wellbeing Care Team data breach impacted many distinctive sorts of affected person info, together with Social Protection figures, insurance details, well being data and remedy information. Though Shields did not use the phrase “protected wellness information” to describe the leaked information, it appears that the compromised affected individual facts was in truth shielded health info.

Guarded wellbeing info is information that relates to a patient’s health issue or how a affected individual pays for their healthcare. For case in point, the outcomes of an MRI or insurance policy claims facts could each be deemed protected overall health facts. Even so, any leaked health and fitness data is only regarded as guarded if it contains at the very least one particular identifier, this sort of as a patient’s identify, email handle, physical tackle, photograph or Social Security number.

The effects of a health care details breach can end result in far more than just a headache. By thieving a patient’s safeguarded health and fitness info, hackers have plenty of facts to commit healthcare identification theft from the client. Healthcare identification theft is often considerably more difficult to solve and arrives at a considerably larger price to individuals than traditional info breaches involving financial institution account or credit score card data.

This is simply because health care facts breaches can place patients’ bodily overall health in jeopardy. Generally, after a breach, a hacker sells affected individual data to a 3rd celebration, who then employs this info to get hold of health-related treatment in the victim’s name. In performing so, the “fake patient” could give health professionals with their very own details that finishes up obtaining combined up with the victim’s professional medical file. For illustration, a faux individual may well give a managing health practitioner a record of their have past professional medical treatments, present remedies or allergy symptoms. This can result in a patient’s medical history made up of inaccurate facts when they go to the medical professional for procedure.