Advarra Holdings, Inc.

Advarra, Inc, a third-party service provider for Moffitt Cancer Center, notified consumers of a data breach occurring on October 25, 2023. An unauthorized third party accessed a single employee account, compromising names. Advarra disabled the account, engaged cybersecurity experts, and provided 24 months of free identity monitoring via Kroll. The incident is contained.

Advarra, Inc. reported to HHS on 2024-04-19 a Hacking/IT Incident affecting 596 individuals. Breached information located on Email. The business associate experienced a hacking attack of an employee's email account which compromised the protected health information (PHI) of 596 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, financial information, and treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring and implemented additional administrative, technical, and security safeguards. Staff were retrained to better protect sensitive data.

Advarra, Inc. reported a credential compromise/unauthorized access incident occurring October 25-26, 2023, discovered November 5, 2023. The breach affected 4,656 individuals nationwide, including 11 Maine residents. Data acquired included Social Security Numbers and personal identifiers. Advarra, a healthcare organization, provided 24 months of credit monitoring and identity restoration services through Kroll. This filing serves as a supplemental notice to the Maine Attorney General.

Advarra, Inc., a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-10-30 and filed notice on 2024-02-02. 1,066 Washington residents were affected. 95 days elapsed between awareness and notification. 5 days to identify the breach. 0 days to contain the breach.

Advarra, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-12-20. The breach occurred from 10/25/2013 to 10/26/2023. 3 Montana residents were affected.

Advarra, Inc. reported a data breach affecting 1,782 individuals, including 5 Maine residents. The breach, which occurred between October 25 and October 26, 2023, involved unauthorized access to their systems due to a credential compromise. The compromised information includes names and Social Security numbers. The company discovered the breach on November 5, 2023, and began notifying affected individuals on November 29, 2023. Advarra is offering 24 months of credit monitoring and identity restoration services through Kroll.