3,117,874 People Warned After Healthcare Firm Breached, Placing Trove of Sensitive Personal and Medical Records at Risk

A US healthcare management services provider says a security breach may have compromised the information of current and former patients.

In a notice, QualDerm Partners says that it detected unauthorized activity on certain systems within its network on Christmas eve. 

An investigation supported by a third-party cybersecurity forensics firm determined that between December 23rd and December 24th, an “unauthorized actor” managed to access and remove information within certain systems in the network.

The Tennessee-based firm says that while the affected data varies by individual, these may include the patient’s  name, date of birth, doctor’s name, medical record number, date of death, email address, treatment information, diagnosis information and health insurance information. 

For a small number of individuals, Qualderm says that the affected data may have also included government-issued identification information such as driver’s license number.

The company says that it has so far no knowledge of any attempted or actual misuse of information but encourages patients to review their account statements and Explanation of Benefits for suspicious activities.

It is also providing access to complimentary credit monitoring and identity protection services.

Based on information submitted to the US Department of Health and Human Services, the data breach impacted 3,117,874 people.

Generated Image: Midjourney