Lexington County Health Services District, Inc.

Lexington Medical Center notified South Carolina regulators of a breach occurring on Oct 4, 2023, where an unauthorized party accessed an employee email account. Forensic review on Jan 18, 2024 revealed files potentially containing patient PII, SSNs, and medical data. No evidence of misuse was found. The company engaged cybersecurity experts and offered credit monitoring.

Lexington Medical Center notified consumers that an unauthorized party accessed an employee email account and data drive on October 4, 2023. The organization detected the activity immediately and contained the incident. A forensic investigation concluded on January 18, 2024, that billing-related documents containing names, dates of birth, medical record numbers, and health insurance IDs may have been accessed. Social Security numbers and electronic medical records were not accessed. The breach affected residents of Maryland and North Carolina.

Lexington Medical Center notified New Hampshire AG of a third-party breach at vendor Healthgrades. Unauthorized access occurred Oct 16-28, 2020 to archived server containing backup files (2010-2011). Affected 2 NH residents with names, addresses, SSNs, and limited health info. Notification sent March 26, 2021, offering 1 year identity monitoring.

Lexington Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-26. 7 Massachusetts residents were affected. The report records the breach type as electronic.

Lexington Medical Center notified South Carolina employees of a cyberattack on Feb 13, 2017, where an unauthorized third party accessed the eConnect/PeopleSoft database. The breach exposed employee PII including names, birth dates, SSNs, and W-2 forms. The organization engaged cybersecurity firms, notified law enforcement, and provided two years of credit monitoring.

Lexington County Health Services District, Inc. d/b/a Lexington Medical Center notified the NH AG of a cyberattack on Feb 13, 2017. An unauthorized third party accessed the eConnect/PeopleSoft employee database, exposing names, DOBs, SSNs, and W-2s of 7 NH residents. The organization engaged forensic firms, notified law enforcement, and offered 2 years of credit monitoring.

Lexington Medical Center, operated by Lexington County Health Services District, Inc., disclosed a cyberattack discovered on February 13, 2017. Unauthorized access was gained to the eConnect/PeopleSoft employee database containing names, birth dates, SSNs, and W-2 forms. The organization engaged cybersecurity firms and law enforcement, and offered two years of credit monitoring to affected employees.