On December 11, 2023, HealthAlliance began mailing notification letters to patients whose information may have been involved in a data security incident.
On October 12, 2023, HealthAlliance learned of a data security incident that disrupted the operations of some of their IT systems. They immediately took steps to secure their systems, contain the incident and notify law enforcement. Additionally, a third-party forensic firm was engaged to conduct an investigation.
Through HealthAlliance’s ongoing investigation, they determined that an unauthorized party gained access to their IT network between the dates of August 18, 2023, and October 13, 2023. While in their IT network, the unauthorized party accessed and acquired files that contained patient information. The information involved varied by patient, but may have included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and other treatment information, health insurance information, provider names, dates of treatment and/or financial information.
HealthAlliance is offering complimentary credit monitoring and identity theft protection services to patients whose Social Security numbers may have been involved.
To help prevent something like this from happening again, HealthAlliance have implemented, and will continue to adopt, additional safeguards and technical security measures to further protect and monitor their systems.
Going Solar with No Upfront Costs
Northwell Health Finds Energy Savings in Steam Systems
Endeavor Elmhurst Hospital Opens New 16-Bed Patient Observation Unit
Sustainability as a Baseline in Healthcare Facilities
Penobscot Valley Hospital Reports Data Security Incident