HealthEC LLC, a top health solutions provider, suffers a major data breach affecting 4.5 million individuals in its client network.
HealthEC LLC, a health management solutions provider, suffered a data breach affecting nearly 4.5 million individuals who received care through one of its clients.
Specializing in population health management (PHM), HealthEC offers a platform for healthcare organizations to handle data integration, analytics, care coordination, patient engagement, compliance, and reporting.
The breach, disclosed on December 22, revealed unauthorized access to systems from July 14 to 23, 2023. An investigation concluded on October 24, 2023, revealing the theft of sensitive data, including names, addresses, Social Security numbers, and medical information.
HealthEC advises affected individuals to vigilantly monitor accounts for potential identity theft and promptly report suspicious activity to relevant parties. Initially, the company did not specify the impact, but a submission for one client indicated 112,005 affected persons. A U.S. Department of Health and Human Services listing now reports a total of 4,452,782 affected individuals.
Seventeen healthcare service providers and state-level health systems, including Corewell Health, HonorHealth, and Beaumont ACO, were impacted by the cyberattack on HealthEC.
Related stories:
