An American nonprofit mental health and fitness and behavioral wellbeing providers supplier has been notifying sufferers of a new cyber-attack that exposed the secured wellness information and facts (PHI) of a lot more than 295,000 patients.
AspenPointe, which is dependent in Colorado Springs, Colorado, was effectively specific by cyber-criminals in September 2020. The attack compelled the health care service provider to just take its devices offline, creating quite a few times of operational disruption.
“We a short while ago found out unauthorized obtain to our network transpired in between September 12, 2020 and roughly September 22, 2020,” mentioned AspenPointe in a notification letter sent out to patients on November 19.
“We promptly introduced an investigation in consultation with exterior cybersecurity experts who regularly look into and examine these styles of conditions to analyze the extent of any compromise of the information and facts on our network.”
The investigation, which concluded on November 10, observed that cyber-criminals experienced been ready to entry affected person data that incorporated full names, dates of delivery, driver’s license quantities, bank account information and facts, Social Security quantities, Medicaid ID figures, dates of visitations, admissions dates, discharge dates, and/or analysis codes.
“To date, we are not conscious of any reports of identification fraud or inappropriate use of your information as a direct consequence of this incident,” mentioned AspenPointe.
The security breach was documented to Health and fitness and Human Services’ Place of work for Civil Rights on November 19 as impacting 295,617 persons. AspenPointe is supplying 12 months of complimentary identity theft protection providers and a $1m insurance reimbursement coverage to those affected.
The healthcare service provider said that following the attack, it has taken methods to strengthen its cybersecurity, which include firewall variations, the implementation of additional endpoint defense, and amplified checking. A password reset has also been executed.
AspenPointe manages 12 organizations that assist 1000’s of individuals every 12 months who are suffering from mental well being difficulties, such as depression and grief, and also supports individuals with compound misuse issues.
The healthcare supplier also gives vocation solutions, assisting Colorado Springs residents to establish employment plans and training them how to lookup for and apply to positions, generate a resume, and make a good effect in a career job interview.