LIFEBRIDGE HEALTH, INC.

LifeBridge Health, Inc. (MD) reported to HHS on 2025-01-08 a Hacking/IT Incident affecting 25,895 individuals via an email phishing scheme targeting multiple employees. PHI exposed included names, addresses, birthdates, Social Security numbers, driver's license numbers, medications, claims, health insurance information, and other treatment information. The covered entity notified HHS, affected individuals, and media; offered credit monitoring; and retrained staff on email security.

LifeBridge Health filed a supplemental notification with the New Hampshire Attorney General on July 30, 2018, regarding a breach affecting 5 NH residents. The incident involved unauthorized access to insurance information that included Social Security numbers. LifeBridge had previously notified affected individuals on May 15, 2018, and is offering one year of complimentary credit monitoring.

LifeBridge Health reported a data breach to the California Attorney General. The incident occurred between September 27, 2016, and March 18, 2018. The filing provides only the occurrence window and organization name; no details regarding the nature of the breach, data types affected, or number of individuals impacted are included in the provided source text.

LifeBridge Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-05-15. 172 Massachusetts residents were affected. The report records the breach type as electronic.

LifeBridge Health, Inc. (MD) reported to HHS OCR on 2018-05-15 a Hacking/IT Incident (malware attack on a network server hosting electronic medical records) affecting 538,127 individuals. An unauthorized person accessed the server on September 27, 2016; the breach was not discovered until March 2018. PHI involved included demographic and clinical information. OCR reviewed compliance with Privacy and Security Rules and obtained assurances of corrective actions, including increased password controls and contingency/disaster-recovery procedures.

LifeBridge Health notified patients of a malware incident discovered March 18, 2018, involving unauthorized access to patient registration and billing systems on September 27, 2016. Data accessed included names, addresses, DOBs, SSNs, and PHI. The organization engaged forensic investigators and offered credit monitoring.

LifeBridge Health notified the NH Attorney General on May 15, 2018, of a malware incident discovered March 18, 2018. Unauthorized access occurred on Sept 27, 2016, affecting 38 NH residents. Data included names, DOBs, SSNs, and PHI. LifeBridge engaged forensic investigators and enhanced password security.