St. Croix Hospice Acquisition Corp.

St. Croix Hospice notified the NH AG of a data event affecting 3 NH residents. Unauthorized access to email accounts occurred between April 23 and May 11, 2019, discovered May 10, 2019. Data potentially exposed included names, DOB, Medicare/Medicaid numbers, and medical info. Response included forensic investigation, credit monitoring, and regulatory notification.

St. Croix Hospice reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-08-08. 1 Massachusetts residents were affected. The report records the breach type as electronic.

St. Croix Hospice notified Montana regulators of a data privacy incident involving unauthorized access to email accounts between April 23 and May 11, 2019. Suspicious activity was detected on May 10, 2019. Affected data included names and other sensitive information. No evidence of misuse was found. The organization engaged forensic investigators, notified HHS and state regulators, and offered one year of credit monitoring.

St. Croix Hospice reported to HHS on 2019-07-09 a Hacking/IT Incident affecting 21407 individuals due to an email phishing attack. Breached information was located on the email system and included a wide range of Protected Health Information (PHI) such as names, Social Security numbers, driver's licenses, financial details, and clinical data like diagnoses and medications.