4.1 Million Impacted by AdaptHealth Data Breach
AdaptHealth disclosed a breach affecting 4,115,802 people after a socially engineered attacker stole health and insurance data from cloud-based patient systems.
A threat actor used social engineering to hijack a user session at a third-party contractor and gained access to AdaptHealth cloud applications, including patient management and document storage systems, in early June. Names, contact and demographic information, and health and health insurance data were exfiltrated; Social Security numbers and financial information were not affected. AdaptHealth reported 4,115,802 affected individuals to HHS, whose breach portal listed the incident this week; Baylor Genetics separately reported 2,810,878 individuals affected in a related June healthcare breach.
- 4,115,802 individuals affected; added to the HHS breach portal
- Social engineering compromised a third-party contractor user session
- SSNs and financial data unaffected; health and insurance data stolen
- Baylor Genetics separately reported 2,810,878 individuals affected
Full article305 words · extracted from securityweek.com · click to collapse
More than 4.1 million individuals had their personal, health, and insurance information stolen in a data breach at healthcare company AdaptHealth.
Operating over 680 facilities across the US, AdaptHealth describes itself as a network of medical equipment companies that provides patients with healthcare solutions and medical equipment.
The company was hacked in early June, when a threat actor gained access to its cloud-based applications, including internal systems used for patient management and document storage.
After the attacker contacted the company, it confirmed the data breach, including the theft of a password file associated with insurance billing.
The hacker used social engineering to compromise a user session at a third-party contractor, AdaptHealth said.
On August 14, the company announced that the threat actor had exfiltrated names, contact and demographic information, and health and health insurance information.
Advertisement. Scroll to continue reading.
The company said Social Security numbers and financial information were not affected.
At the time, it also notified the US Department of Health and Human Services (HHS) that 4,115,802 individuals were affected. HHS added AdaptHealth to its data breach portal this week.
Another major healthcare data breach reported to the HHS on August 14 and recently added to the portal affected clinical genomics company Baylor Genetics.
Like AdaptHealth, Baylor Genetics was hacked in June, and hackers stole patients’ names, dates of birth, medical test data, health insurance information, and Social Security numbers. The PII of Baylor Genetics’ employees was also compromised in the incident, along with their financial information.
Overall, hackers stole the electronic protected health information of 2,810,878 individuals, Baylor Genetics told the HHS.
Related: Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Related: 153 Million Driver License Images Offered on Dark Web
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.securityweek.com/4-1-million-impacted-by-adapthealth-data-breach/