Health technology company HealthEC has confirmed that it suffered a data breach in the summer of 2023 during which it lost sensitive data belonging to 4.5 million people, customers of its clients.
In a report filed with the Maine Attorney General’s office, the company said the attack occurred between July 14 and 23 of last year and that hackers stole names and other personal identifiers.
However, beepcomputer reports that the attackers stole people’s names, mailing addresses, dates of birth, social security numbers, taxpayer identification numbers, medical record numbers, medical information (diagnosis, diagnosis code, physical/mental condition, prescription information and provider name and location), health information. insurance information (beneficiary number, subscriber number, Medicaid/Medicare ID), and billing and claims information (patient account number, patient identification number, and treatment cost information), citing a notice published by a victim.
More than a dozen victims
As data was stolen from HealthEC customers, the incident affected several companies. Some of the companies listed in the notice are Corewell Health, HonorHealth, Beaumont ACO, State of Tennessee – TennCare Division, Princeton Physicians Organization University Medical Center and New York Alliance for Integrated Care.
As an example, MD Valuecare was reported to have 112,005 patients with stolen information.
“In general, individuals should remain alert against incidents of identity theft and fraud by reviewing account statements, explanations of benefit statements, and monitoring free credit reports for suspicious activity and errors,” HealthEC said in its notice. The company added that “suspicious activities should be reported immediately to relevant parties, including an insurance company, healthcare provider, and/or financial institution.”
Patients should be especially careful when receiving emails and other communications from people claiming to be employees of any of these companies.
HealthEC develops a population health management (PHM) platform used by several healthcare companies for data analysis, compliance, reporting, and more.
