Providence St. Joseph Health Investment Trust

Providence St. Joseph Health notified patients that MCG Health, LLC, a third-party vendor, experienced a breach on March 25, 2022. An electronic file containing patient names, SSNs, medical codes, addresses, phone numbers, DOBs, and genders was accessed by an unauthorized source. MCG engaged forensics and law enforcement. Providence offered 12 months of identity protection via IDX.

Providence St. Joseph Health notified Montana residents that on October 13, 2020, a clinician accessed an individual's electronic medical record in violation of policy. Data included PHI and basic identity info. No SSN or financial data was affected. Corrective action was taken against the caregiver.

Providence St. Joseph Health (operating as GAIN) notified Montana residents of a data security incident where unauthorized access occurred between April 14-18, 2020. Suspicious activity was detected on April 15, 2020. The incident involved customer names and other personal information, but not Social Security numbers. No evidence of misuse was found. GAIN engaged a cybersecurity firm, secured servers, and implemented enhanced monitoring.

Providence St. Joseph Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-04-15. 7 Massachusetts residents were affected. The report records the breach type as both.