Bay Cove Human Services, Inc.

Bay Cove Human Services, Inc., a healthcare organization, reported a data breach affecting 21 Maine residents. The breach, described as an external system breach (hacking), occurred between December 29, 2024, and December 30, 2024, and was discovered on February 21, 2025. Affected individuals were notified on March 3, 2025, and offered 12 months of credit monitoring and identity protection services through IDX.

Bay Cove Human Services, Inc. notified the New Hampshire Attorney General on March 4, 2025, that a data security incident discovered on December 30, 2024, may have exposed personal and protected health information of 49 NH residents. The specific data accessed was not identified. Bay Cove engaged cybersecurity experts, secured systems, and offered 12 months of credit monitoring and identity theft protection services.

Bay Cove Human Services, Inc. reported to HHS on 2025-03-03 a Hacking/IT Incident affecting 21,295 individuals. Breached information located on Network Server. The PHI involved included names, addresses, dates of birth, social security numbers, diagnoses, conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE implemented new technical safeguards.

Bay Cove Human Services, Inc. notified clients and employees of a data security incident discovered on December 30, 2024. Unauthorized access to network systems occurred, potentially exposing personal and protected health information. Specific data types were not identified during the investigation. Bay Cove engaged cybersecurity experts, secured systems, and offered 12 months of credit monitoring and identity protection services through IDX.

Bay Cove Human Services Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-29 and was reported on 2025-03-03. 4 Indiana residents were affected. 24,791 individuals affected in total.

Bay Cove Human Services, Inc. reported a cybersecurity incident to the Maryland Attorney General on March 3, 2025. The breach, discovered on December 30, 2024, involved unauthorized access to network systems, potentially exposing personal information of five Maryland residents, including names, SSNs, driver's license info, financial account data, and health/employment records. Bay Cove engaged cybersecurity experts, secured systems, and provided 12 months of credit monitoring and identity theft recovery services via IDX.