Two studies that I’ve been studying at the moment:
ARcare in Arkansas is notifying individuals whose private and/or medical data might have been accessed or acquired in a malware incident. The malware enabled an unauthorized actor to entry or purchase data between January 18, 2022 and February 24, 2022. The forms of data concerned included names, Social Security numbers, driver’s license or state identification numbers, dates of delivery, monetary account data, medical therapy data, prescription data, medical prognosis or situation data, and medical insurance data.
Their press launch might be discovered on PRNewswire, and there’s a discover on their web site. Neither reveals the variety of individuals being notified and the incident isn’t but posted on HHS’s public breach device.
Smile Brands Update
Back in June, 2021, Smile Brands disclosed a ransomware incident that occurred in April, 2021. A pattern notification letter was additionally supplied to the California Attorney General’s Office by the agency.
Smile Brands present dental workplace help companies and is a enterprise affiliate underneath HIPAA.
Smile Brands regional manufacturers and teams. Source: Smile Brands
The forms of data concerned within the breach included title, deal with, phone quantity, Social Security quantity, date of delivery, medical insurance data, and/or prognosis data. Smile Brand’s report back to HHS in June, 2021 had indicated that 1,200 sufferers have been being notified, however that quantity had been subsequently revised to 199,683.
Since that point, the California-based agency has sometimes supplied updates to regulators, though it’s not at all times clear whether or not the numbers are for sufferers, staff, or each. According to their April 12, 2022 replace to the Maine Attorney General’s Office, earlier client notifications had been made on September 28, 2021, January 12, 2022, and February 25, 2022, and the state had beforehand been notified on October 8, 2021.
As of this most up-to-date replace, the overall variety of people notified in regards to the incident at the moment stands at 2,592,494. A template letter to staff was additionally submitted to the state.