On December 11, 2023, HealthAlliance began mailing notification letters to patients whose information may have been involved in a data security incident.
On October 12, 2023, HealthAlliance learned of a data security incident that disrupted the operations of some of their IT systems. They immediately took steps to secure their systems, contain the incident and notify law enforcement. Additionally, a third-party forensic firm was engaged to conduct an investigation.
Through HealthAlliance’s ongoing investigation, they determined that an unauthorized party gained access to their IT network between the dates of August 18, 2023, and October 13, 2023. While in their IT network, the unauthorized party accessed and acquired files that contained patient information. The information involved varied by patient, but may have included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and other treatment information, health insurance information, provider names, dates of treatment and/or financial information.
HealthAlliance is offering complimentary credit monitoring and identity theft protection services to patients whose Social Security numbers may have been involved.
To help prevent something like this from happening again, HealthAlliance have implemented, and will continue to adopt, additional safeguards and technical security measures to further protect and monitor their systems.
What To Know Now About OSHA's Updated Hazcom Rule
HealthSource of Ohio and UC Health Partner for New Medical Office Building
NorthShore Health Centers Investigates Data Security Incident
Healthcare Ransomware Attacks Reach Record High in Q3 2026
Bon Secours Mercy Health Acquires Fauquier Health