December 9, 2024 at 06:07AM
Anna Jaques Hospital reported a data breach affecting over 316,000 individuals, compromising personal, medical, and financial information. Discovered on December 25, 2023, the incident led to the diversion of emergency patients. The hospital offers two years of free identity theft monitoring and urges vigilance against potential fraud.
**Meeting Takeaways: Anna Jaques Hospital Data Breach**
1. **Incident Overview**:
– A data breach at Anna Jaques Hospital was identified on December 25, 2023.
– The hospital has notified over 316,000 individuals whose personal information may have been compromised.
2. **Initial Response**:
– The breach was publicly disclosed on January 23, 2024, after the hacker group “Money Message” claimed responsibility and published the hospital on its leaks site.
– The breach resulted in the diversion of emergency room patients due to the temporary shutdown of the hospital’s health record system.
3. **Stolen Data Details**:
– Initially, it was believed that personally identifiable information (PII), medical, and insurance data were compromised.
– An updated notice on December 5, 2024, indicated that financial information might also have been exfiltrated.
– Compromised information may include demographic data, medical records, health insurance info, Social Security numbers, driver’s license numbers, and financial details.
4. **Affected Individuals**:
– The Maine Attorney General’s Office was notified that 316,342 individuals might be affected.
5. **Security Measures**:
– Anna Jaques Hospital provided two years of free identity theft and credit monitoring services to those potentially impacted.
– The hospital has not found evidence of the stolen data being used for fraudulent activities but advises continued vigilance.
6. **Recommendations**:
– Patients and employees should regularly review financial account statements for fraudulent activity.
– Patients should also monitor explanation of benefits statements from their health insurance providers for any discrepancies.
7. **About Anna Jaques Hospital**:
– Located in Newburyport, Massachusetts, it is a not-for-profit community hospital serving the Merrimack Valley, North Shore, and Southern New Hampshire areas.
This summary encapsulates the key points regarding the data breach and the hospital’s response, ensuring clarity for further discussions or actions needed.