Several Senior Care Facilities Hit by Cyberattack

The cyberattack affected multiple senior care facilities in Pennsylvania back in April.

By HFT Staff


The Williamsport Home, a retirement village in Pennsylvania, and Senior Choice, Inc., a provider of skilled nursing care at three inpatient facilities in Pennsylvania – The Atrium in Johnstown, Beacon Ridge in Indiana, and The Patriot in Somerset – have been affected by a cyberattack that was detected on April 24, 2023. 

Steps were immediately taken to secure the network when the security breach was detected and while the investigation into the cyberattack is ongoing, it has been determined that unauthorized individuals gained access to certain business operation systems between April 18 and April 24, 2023. The systems used directly for residential care do not appear to have been compromised; however, the business systems compromised in the attack contained protected health information that was potentially accessed or obtained. 

The types of information that were exposed varied from individual to individual and may have included one or more of the following: Name, address, birth date, admission date, discharge date, death date, medical record number, provider or facility name, medical condition, diagnosis and/or treatment information, lab results, medications, payment amount history information, insurance payment amount information, date of service, Social Security number, financial account information, credit card number, medical information, health insurance information, driver’s license or state identification number, passport number and any information on an individual that was created, used or disclosed in the course of providing healthcare services. 

Additional technical safeguards are being implemented to improve security to prevent similar breaches in the future. It has not yet been determined how many individuals have been affected so all individuals that are currently receiving services or have done in the past should therefore be vigilant against any misuse of their information. To meet the breach reporting requirements of the HIPAA Breach Notification Rule, the breach has been reported to the HHS by The Williamsport Home and Senior Choice as affecting at least 500 individuals. The totals will be updated when it has been confirmed how many individuals have been affected. 



July 13, 2023


Topic Area: Information Technology , Safety , Security


Recent Posts

The Fatal Flaws in Active Shooter Response in Healthcare Facilities

The most effective solutions to workplace violence are sophisticated emergency response planning and master level training for all employees.


Utah Hospital Outage Highlights Backup Power and Resiliency Challenges

The hospital went without power for nearly two hours.


Ground Broken on New North Dakota State Hospital

The 300,000-square-foot facility in Jamestown will provide 140 beds in a modern, trauma-informed care environment.


Form Your Pit Crew: Key Takeaways From the 2025 Healthcare Innovations Conference

The Healthcare Innovations Conference brought together healthcare facility managers from across the country to collaborate on industry issues.


Glens Falls Hospital Caught Up in Oracle Health Data Breach

As of November 2, 2024, Glens Falls Hospital no longer uses Oracle Health/Cerner as its electronic health record vendor.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.