MULTICARE HEALTH SYSTEM

MultiCare Health System, Inc. reported a data breach to the Maine Attorney General, which was discovered on September 30, 2022. The breach, an external system hacking incident that occurred on May 18, 2022, affected 3 Maine residents. The compromised information included names and Social Security numbers. In response, MultiCare offered two years of Equifax credit monitoring services to the individuals affected. The notification to consumers was sent on October 25, 2022. The breach was reported by outside counsel representing a service provider involved in the incident.

MultiCare Health System, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-12-12. 7 Massachusetts residents were affected. The report records the breach type as electronic.

MultiCare Health System, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-05-18 and was reported on 2022-10-25. 4 Indiana residents were affected. 23,712 individuals affected in total.

Kaye-Smith Enterprises, Inc. reported a ransomware attack affecting MultiCare Health System, Inc. employee data. The incident occurred May 18–June 2, 2022, and was discovered on June 2, 2022. 22,679 Washington residents received notice on October 25, 2022. Data exposed included names, addresses, and SSNs. Kaye-Smith engaged law enforcement and enhanced security.

MultiCare Health System (WA) reported to HHS on 2020-08-22 a Hacking/IT Incident (ransomware attack) affecting 179,189 individuals. The attack was experienced by a business associate and impacted ePHI stored on a Network Server. Breached information included names, dates of birth, clinical information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

MultiCare Health System notified Washington AG of a ransomware attack on third-party vendor Blackbaud. Attack occurred Feb-May 2020; MultiCare notified July 16, 2020. 302,769 Washingtonians affected. Data included names, addresses, DOBs, and limited healthcare info. No SSNs or financial data compromised. Blackbaud paid ransom and destroyed data copy.

MultiCare Health System (WA) reported to HHS OCR on 2017-01-26 a Hacking/IT Incident affecting 1,249 individuals. A phishing attack enabled a hacker to gain access to an employee's email credentials for approximately 3 days. PHI exposed included names, dates of birth, dates of service, diagnoses, medical record numbers, and descriptions of treatment. The CE updated phishing policies, implemented technical safeguards, and retrained staff. OCR provided technical assistance and obtained documented assurances of corrective action. Breached information located on Email.