Familylinks, Inc

Familylinks Inc. notified Montana residents of a data security incident discovered on May 3, 2024, involving unauthorized access to an employee email account. The incident potentially exposed names and protected health information. Familylinks engaged cybersecurity experts and is offering complimentary identity protection services.

Familylinks Inc. reported to HHS that on November 12, 2024, an employee was the subject of an email phishing scheme that exposed the protected health information (PHI) of 3,775 individuals. The breach occurred via email and compromised data including names, dates of birth, addresses, some Social Security numbers, claims, financial information, and other clinical details. In response, Familylinks Inc. enhanced its multifactor authentication requirements.

FAMILY LINKS, INC. filed a data-breach notice with the Illinois Attorney General in November 2024 (case 24-11-014). The register records the breach as discovered on May 3, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Family Paths, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-10-09. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Familylinks reported to HHS on 2022-03-04 a Hacking/IT Incident affecting 1494 individuals. The business associate was the victim of a ransomware attack. Breached information located on Electronic Medical Record, Network Server. PHI included names, dates of birth, addresses, diagnoses, lab results, and medications.