Data breach affects thousands at Kisco Senior Living

Carlsbad, CA-based Kisco Senior Living, managing 25 senior living communities across eight states and Washington, DC, revealed a data breach potentially impacting over 26,000 residents and others. Legal counsel for the company disclosed that the breach occurred around June 6, with names and Social Security numbers potentially exposed.

Following the discovery, Kisco promptly secured its network and initiated an investigation, engaging cybersecurity experts. Donna Maddux, from the law firm Constangy, Brooks, Smith & Prophete, informed Maine Attorney General Aaron Frey about the breach as required by law. Maddux stated that 26,663 individuals, including 13 in Maine, were affected.

Kisco enlisted a third-party vendor to review the compromised data comprehensively, identifying those impacted on April 9. The company reported the incident to the FBI’s Internet Crime Complaint Center and is cooperating with investigative efforts.

To mitigate the impact, Kisco provides affected individuals with 12 months of free credit and dark web monitoring, a $1 million identity fraud loss reimbursement policy, identity theft recovery services, and 90-day access to a call center. Additionally, the company has implemented enhanced security measures.

The breach was attributed to the ransomware group BlackByte, as reported by Comparitech. This incident marks BlackByte’s third-largest attack, with an average ransom demand of $375,000.

The disclosure of the breach coincides with Kisco’s recognition in the US News & World Report’s Best Senior Living ratings program, highlighting the complexity of cybersecurity challenges even amid industry accolades.