Healthcare software provider ConnectOnCall says cyber incident impacted over 900,000 individuals

Healthcare communication platform ConnectOnCall.com said that the data security incident it suffered earlier this year compromised the sensitive personal information of more than 900,000 individuals.

 

Headquartered in Wilmington, Delaware, ConnectOnCall provides a communication platform for connecting healthcare providers with their patients. The platform helps customers enhance their after-hours call processes and enhance patient communications.

 

In a press release published on December 11, ConnectOnCall said that on May 12, it identified an issue impacting its ConnectOnCall software and immediately launched an investigation with assistance from externa cyber security experts to determine the nature and scope of the incident.

 

ConnectOnCall also took steps to secure its affected systems and ensured the overall security of its network environment.

 

“ConnectOnCall’s investigation revealed that between February 16, 2024, and May 12, 2024, an unknown third party had access to ConnectOnCall and certain data within the application, including certain information in provider-patient communications,” the company said.

 

The compromised data included names, phone numbers, dates of birth, Social Security Numbers, medical record numbers, and information related to health conditions, treatments, or prescriptions.

 

ConnectOnCall reported the incident to the U.S. Department of Health and Human Services, stating that at least 914,138 individuals were affected by the cyber security incident.

 

“After becoming aware of the incident, ConnectOnCall took the ConnectOnCall product offline and has been working through a phased restoration of the product in a new, more secure environment. ConnectOnCall also notified federal law enforcement of the incident,” the company added.

 

ConnectOnCall has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered complimentary identity protection and credit monitoring services through Kroll  to individuals whose social security numbers were compromised during the incident.