Pocahontas Medical Clinic announces data breach following cyberattack

Pocahontas Medical Clinic (PMC), a prominent healthcare provider based in Pocahontas, Arkansas, disclosed a significant data breach to the U.S. Department of Health and Human Services Office for Civil Rights following a cyberattack in May 2024 that compromised sensitive patient information. The clinic’s investigation revealed that an unauthorized party accessed the organization’s computer network, potentially exposing a wide array of personal and medical data.

The breach was initially discovered on May 30, 2024, when PMC detected unauthorized access to its computer systems. In response, the clinic swiftly disconnected its network to prevent further intrusion and launched a thorough investigation with the assistance of third-party cybersecurity experts. The investigation confirmed that the attackers may have accessed sensitive data, including names, addresses, email addresses, phone numbers, dates of birth, Social Security numbers, medical record numbers, medical information, and health insurance details.

By July 1, 2024, PMC had completed its review of the compromised files, identifying the specific individuals and types of information affected. Consequently, the clinic began notifying impacted patients on August 1, 2024, providing details on the nature of the breach and the data that had been compromised.

Given the sensitive nature of the information exposed, individuals affected by the breach are at risk of identity theft and fraud. PMC has advised patients to remain vigilant for any suspicious activity related to their personal information. Additionally, patients are encouraged to take proactive steps to protect themselves, such as monitoring their credit reports and considering credit freezes or fraud alerts.

The clinic also recommends that patients consult with a data breach attorney to explore their legal options and to better understand how to safeguard against potential misuse of their compromised data.