CCM Health says data breach impacted over 85,000 patients

Minnesota-based healthcare service provider CCM Health said it experienced a data security incident that compromised the sensitive personal information of more than 85,000 individuals.

 

In a data breach notice filed with the Office of Maine Attorney General, CCM Health said that earlier this year, it became aware of a data security incident affecting its network and immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“After a thorough and detailed forensic investigation, we concluded that the unauthorised accessed the network between April 3, 2023 and April 10, 2023, and, as a result, may have accessed and removed a number of files from our network.

 

“Upon learning this, we immediately conducted an extensive and comprehensive review of the impacted files and, on February 12, 2024, we discovered that some of the files contain your personal and/or health information. On May 31, we located your last known address to provide you with direct notice of this incident,” reads the notice.

 

The compromised data included names, dates of birth, Social Security Numbers, medical information including medical account numbers, patient account numbers, healthcare providers’ names, prescription information, diagnosis, diagnosis code, treatment type, treatment location, treatment date, admission date, discharge date, lab results and more.

 

CCM Health said in its regulatory filing with the Maine state regulator that at least 85,258 individuals were impacted by the data security incident.

 

The healthcare company has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered one year of complimentary identity protection and credit monitoring services through Cyberscout to all affected individuals.