On December 11, 2023, HealthAlliance began mailing notification letters to patients whose information may have been involved in a data security incident.
On October 12, 2023, HealthAlliance learned of a data security incident that disrupted the operations of some of their IT systems. They immediately took steps to secure their systems, contain the incident and notify law enforcement. Additionally, a third-party forensic firm was engaged to conduct an investigation.
Through HealthAlliance’s ongoing investigation, they determined that an unauthorized party gained access to their IT network between the dates of August 18, 2023, and October 13, 2023. While in their IT network, the unauthorized party accessed and acquired files that contained patient information. The information involved varied by patient, but may have included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and other treatment information, health insurance information, provider names, dates of treatment and/or financial information.
HealthAlliance is offering complimentary credit monitoring and identity theft protection services to patients whose Social Security numbers may have been involved.
To help prevent something like this from happening again, HealthAlliance have implemented, and will continue to adopt, additional safeguards and technical security measures to further protect and monitor their systems.
Building Envelope Design: Beyond Energy Efficiency
Outpatient Surge Reshapes Long-Term Strategy for Medical Outpatient Buildings
Mercy Medical Center to Be Integrated into Baystate Health
Managing IAQ in Healthcare Facilities During Wildfires
Building Hospital Resilience in an Era of Extreme Weather