Third-Party Data Breach

MultiCare Notifies 23K of Third-Party Breach

by Jill McKeon

MultiCare Health System in Washington suffered a third-party data breach that originated at its mailing service provider, Kaye-Smith. As previously reported, the breach at Kaye-Smith impacted other...

Third-Party Data Breach Impacts 271K at Oklahoma Healthcare Administrative, Tech Services Company

by Jill McKeon

Oklahoma-based Avem Health Partners, which provides administrative and technology services to healthcare organizations, notified 271,303 individuals of a healthcare data breach that occurred at 365...

CMS Responds to Third-Party Data Breach Impacting 254K Medicare Beneficiaries

by Jill McKeon

UPDATE 12/16/2022 - This article has been updated to include a statement from Healthcare Management Solutions.  A third-party data breach potentially impacted the protected health information...

CareFirst Administrators Impacted By Phishing Scam at RCM Vendor

by Jill McKeon

CareFirst Administrators (CFA) notified 14,538 individuals of a phishing scam that occurred at Conifer Revenue Cycle Solutions, a provider of revenue cycle management services to healthcare...

Third-Party Data Breach Impacts 119 Pediatric Practices, 2.2M Patients

by Jill McKeon

Connexin Software, a company that offers pediatric-specific health IT solutions and operates under the name Office Practicum, notified more than 2.2 million individuals of a healthcare data breach that...

Community Health Network Notifies 1.5M of Data Breach Stemming From Tracking Tech

by Jill McKeon

Indiana-based integrated healthcare system Community Health Network notified 1.5 million individuals of a data breach stemming from the use of third-party tracking technologies from companies like...

Louisiana Corrections Department Suffers Third-Party Data Breach, 85K Impacted

by Jill McKeon

The Louisiana Department of Public Safety and Corrections reported a third-party data breach that impacted 85,466 inmates who received offsite medical care during their incarceration between January...

St. Luke’s Health Suffers Third-Party Data Breach, Unrelated to CommonSpirit Attack

by Jill McKeon

Texas-based St. Luke’s Health notified 16,906 individuals of a third-party data breach that impacted Adelanto Healthcare Ventures (AHCV), a consulting services vendor. The breach is unrelated to...

Eye Care Leaders Data Breach Impacts 15K at Oklahoma Eye Care Practice

by Jill McKeon

Oklahoma-based Massengale Eye Care was the latest eye care practice to report impacts from the Eye Care Leaders (ECL) data breach. As previously reported, Eye Care Leaders, which offers an...

Humana Discloses Third-Party Data Breach at Choice Health

by Jill McKeon

Humana disclosed a third-party data breach to the Maine Attorney General’s Office that impacted 22,767 individuals. The breach originated at Choice Health, which sells Medicare products on...

Additional Orgs Report Aftermath of OneTouchPoint Data Breach

by Jill McKeon

Common Ground Healthcare Cooperative and Medical Mutual of Ohio each submitted reports regarding the OneTouchPoint (OTP) data breach to the HHS Office for Civil Rights (OCR) recently. OTP originally...

Third-Party Mailing Error Exposes 37K SSNs at Sound Health and Wellness Trust

by Jill McKeon

A third-party mailing error originating at Zenith American Solutions resulted in the exposure of 37,146 Social Security numbers provided to Sound Health and Wellness Trust. Zenith American Solutions...

120K Priority Health Members Impacted By Third-Party Data Breach

by Jill McKeon

Priority Health issued a notice about a third-party data breach that originated at the law firm Warner Norcross & Judd (WNJ) in October 2021. Priority Health is Michigan’s second-largest...

Geisinger, Kaiser Permanente, 35 Others Impacted By Third-Party Vendor Data Breach

by Jill McKeon

OneTouchPoint (OTP), a third-party vendor that provides printing and mailing services to healthcare providers and health insurance carriers, disclosed a healthcare data breach that impacted 37...

Healthcare Orgs Continue to Report Impacts Of Recent Third-Party Data Breaches

by Jill McKeon

Third-party data breaches are continuing to overwhelm the healthcare sector, based on the current state of the HHS Office for Civil Rights (OCR) data breach portal. As organizations continue to report...

BCBS of Massachusetts Reports Third-Party Vendor Data Breach

by Jill McKeon

Blue Cross and Blue Shield (BCBS) of Massachusetts began notifying 4,855 individuals of a third-party vendor data breach, a notice on the Maine Attorney General’s Office website stated. The...

CSA Issues Guidance on Third-Party Risk Management in Healthcare

by Jill McKeon

Drafted by the Health Information Management Working Group, the Cloud Security Alliance (CSA) released new guidance on third-party risk management in healthcare. Threat actors are increasingly using...

Highmark Health, WellDyneRx, Others Report Healthcare Data Breaches

by Jill McKeon

Healthcare data breaches continue to overwhelm the sector in the latter half of the year, with organizations reporting ransomware attacks, third and fourth-party breaches, and unauthorized network...

Vendor Ransomware Attack Impacts 660 Healthcare Organizations

by Jill McKeon

Professional Finance Company (PFC), an accounts receivable management agency based in Greeley, Colorado, disclosed a ransomware attack that impacted 660 of its healthcare organization...

MCG Health Data Breach Impacts 8 Organizations, 793K Individuals

by Jill McKeon

As previously reported, Seattle-based company MCG Health suffered a data breach in March resulting from unauthorized access. The Seattle-based software company provides patient care guidelines to...