LIFELONG MEDICAL CARE

LifeLong Medical Care reported to HHS on 2026-01-30 a Unauthorized Access/Disclosure affecting 70,000 individuals. Breached information located on Other. A subcontractor of its business associate experienced a cyberattack compromising PHI including demographic information. CE and BA implemented additional safeguards.

LifeLong Medical Care notified patients of a breach involving protected health information (PHI) accessed by an unauthorized actor via a TriZetto Provider Solutions web portal. The unauthorized access began in November 2024 and was discovered on October 2, 2025. Affected data included names, addresses, dates of birth, Social Security numbers, and health insurance information. LifeLong is working with its technical partner OCHIN and offering identity theft protection services.

Nonstop Administration and Insurance Services, Inc. notified the NH Attorney General of a data breach affecting Lifelong Medical Care. On December 22, 2022, an unknown party accessed Nonstop's cloud services platform without authorization. One New Hampshire resident associated with Lifelong Medical Care was potentially impacted. The accessed data may have included names and health insurance information. Nonstop engaged forensic specialists, reported to law enforcement, and implemented a redesigned cloud-services workflow. Affected individuals were offered credit monitoring.

Nonstop Administration and Insurance Services, acting on behalf of LifeLong Medical Care, reported unauthorized access to a cloud services platform on December 22, 2022. An unknown party accessed the platform for a limited time. The investigation could not rule out access to specific information, including names and health benefits data. Nonstop engaged forensic specialists, notified law enforcement, and implemented a redesigned cloud-services workflow. Affected individuals were offered credit monitoring and identity protection services.

Lifelong Medical Care reported a data breach to the Oregon Attorney General. The breach was reported on 2021-09-07. The breach was discovered on 11/24/20208/9/2021. Notice was sent on 8/24/2021.

LifeLong Medical Care notified NH AG of a breach involving its third-party vendor Netgain. Netgain suffered a ransomware attack starting Nov 24, 2020. LifeLong discovered on Aug 9, 2021 that PHI and SSNs of 5 NH residents were accessed. Notifications sent Aug 24, 2021 with credit monitoring offered.

LifeLong Medical Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-08-27. 442 Massachusetts residents were affected. The report records the breach type as electronic.

LifeLong Medical Care notified customers that a ransomware attack on third-party vendor Netgain resulted in unauthorized access to files containing full names and Social Security Numbers. Netgain discovered anomalous activity on November 24, 2020, and determined files were accessed by February 25, 2021. LifeLong Medical Care confirmed the involvement of customer data on August 9, 2021, and offered one year of complimentary credit monitoring.

LifeLong Medical Care reported to HHS on 2021-08-25 a Hacking/IT Incident affecting 115,448 individuals. Breached information located on Network Server. A business associate was the victim of a ransomware attack compromising PHI including names, DOBs, SSNs, financial info, and treatment data. CE provided credit monitoring and strengthened safeguards.

LifeLong Medical Care notified Montana residents of a ransomware attack on third-party vendor Netgain. The incident, discovered in August 2021, resulted in the unauthorized access of names and Social Security numbers. The organization is offering one year of credit monitoring.