On December 11, 2023, HealthAlliance began mailing notification letters to patients whose information may have been involved in a data security incident.
On October 12, 2023, HealthAlliance learned of a data security incident that disrupted the operations of some of their IT systems. They immediately took steps to secure their systems, contain the incident and notify law enforcement. Additionally, a third-party forensic firm was engaged to conduct an investigation.
Through HealthAlliance’s ongoing investigation, they determined that an unauthorized party gained access to their IT network between the dates of August 18, 2023, and October 13, 2023. While in their IT network, the unauthorized party accessed and acquired files that contained patient information. The information involved varied by patient, but may have included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and other treatment information, health insurance information, provider names, dates of treatment and/or financial information.
HealthAlliance is offering complimentary credit monitoring and identity theft protection services to patients whose Social Security numbers may have been involved.
To help prevent something like this from happening again, HealthAlliance have implemented, and will continue to adopt, additional safeguards and technical security measures to further protect and monitor their systems.
On the Lookout: The Software Supply Chain as a Healthcare Cyberattack Vector
Hackensack Meridian Health & Wellness Center at Clifton Opens
Suffolk Breaks Ground on Expansion of White Plains Hospital
EVS Leadership Culture Critical in Preventing Hospital-Acquired Sepsis
Man Dies by Suicide in Emergency Department Waiting Room at Kansas Hospital