NextGen Healthcare, Inc.

NextGen Healthcare, Inc. reported a data incident where an unknown third party gained unauthorized access to its NextGen Office system using stolen client credentials. The breach affected personal information of 1,094 New Hampshire residents between March 29 and April 14, 2023. No health records were impacted. NextGen engaged forensic experts, reset passwords, notified law enforcement, and offered 24 months of credit monitoring.

NextGen Healthcare, Inc. reported a data breach occurring between March 29, 2023, and April 14, 2023, discovered on April 24, 2023. Unauthorized access to a database occurred via stolen client credentials obtained from unrelated incidents. The breach affected approximately 1,049,375 individuals, including 3,913 Maine residents. Compromised data included names and Social Security Numbers. NextGen provided 24 months of identity theft protection through Experian.

NextGen Healthcare, Inc. notified individuals of a security incident where an unknown third party gained unauthorized access to personal information between March 29 and April 14, 2023. The accessed data included names, dates of birth, addresses, and Social Security numbers. No health or medical records were accessed. The company engaged forensic experts, reset passwords, and contacted law enforcement. Affected individuals are offered 24 months of identity theft protection.

NextGen Healthcare, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-04. The breach occurred during 3/29/2023 - 4/14/2023. The breach was discovered on 4/24/2023. 1,049,375 individuals were affected. Notice was sent on 4/28/2023.

NextGen Healthcare, Inc. notified South Carolina residents of a data incident where an unknown third party gained unauthorized access to personal information (name, DOB, address, SSN) between March 29 and April 14, 2023. The incident was discovered on March 30, 2023. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of identity theft protection.

NextGen Healthcare, Inc. reported unauthorized access to NextGen Office system between March 29 and April 14, 2023. An unknown third party used stolen client credentials to access personal information (name, DOB, address, SSN) of 21,981 Washington residents. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of credit monitoring.

NextGen Healthcare, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-05-02. 16,228 Massachusetts residents were affected. The report records the breach type as electronic.

NextGen Healthcare, Inc. notified Montana patients of a data incident where unauthorized access occurred between March 29 and April 14, 2023. Personal information including names, DOBs, addresses, and SSNs was accessed. No health records were compromised. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of identity theft protection.

NextGen Healthcare, Inc. notified patients of a data incident involving unauthorized access to the NextGen Office system between March 29 and April 14, 2023. The breach exposed personal information including names, dates of birth, addresses, and Social Security numbers. No health or medical records were accessed. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of identity theft protection via Experian.

NextGen Healthcare, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-29 and was reported on 2023-04-28. 17,001 Indiana residents were affected. 1,049,375 individuals affected in total.

NextGen Healthcare, Inc. notified Vermont consumers of a data incident where an unknown third party gained unauthorized access to personal information (name, DOB, address, SSN) between March 29 and April 14, 2023. No health records were accessed. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of identity theft protection.

NEXTGEN HEALTHCARE, INC. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-285). The register records the breach as discovered on March 29, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

NextGen Healthcare, Inc. notified the New Hampshire Attorney General of an incident on November 13, 2018. On October 16, 2018, the company discovered that a W-2 form belonging to one New Hampshire resident was inadvertently distributed to a former employee who had requested their own copy. The former employee cooperated and assured no further use occurred. NextGen modified its W-2 distribution process to include peer and HR reviews.