SHERRILL HOUSE, INC.

Sherrill House, Inc. notified the New Hampshire Attorney General of a cybersecurity incident potentially involving 43 New Hampshire residents. The incident impacted personal information and protected health information. The company completed its review and located contact information for affected individuals by June 29, 2022.

Sherrill House, Inc., a healthcare organization, reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on September 4, 2021. The breach was discovered on November 4, 2021, and affected 19 Maine residents. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. The company began notifying affected individuals on July 5, 2022, and offered two years of credit monitoring and identity theft protection services.

Sherrill House, Inc. (MA) reported to HHS on 2022-01-03 a Hacking/IT Incident affecting 5,006 individuals. Multiple employees were subjects of an email phishing scheme that compromised PHI including names, gender, addresses, phone numbers, dates of birth, drivers' license and state ID numbers, Social Security numbers, financial and claims information, diagnoses, lab results, medications, and other treatment information. Breached information was located in Email. The CE notified HHS, affected individuals, and the media, and implemented additional administrative, technical, and security safeguards.