Epic

On January 24, 2023, Beaver Medical Group (BMG) / Epic Management LLC (EPIC), part of Optum, detected unusual activity on an employee workstation. An unauthorized third party launched a targeted phishing attack, gaining temporary access to certain emails and records. The incident involved names, member IDs, health plan names, and premium payment amounts. No SSNs, clinical info, or financial account data were compromised. Security controls were enhanced.

Epic Management LLC, a nursing home operator, notified the NH Attorney General of a data security incident discovered on September 2, 2021. An unauthorized actor accessed files in Epic's email tenant, potentially exposing PII, SSNs, health info, and financial data. Three NH residents were notified on December 14, 2022. Epic engaged forensic experts and offered credit monitoring.

Epic Management LLC reported a data breach affecting 10,050 individuals. The incident, described as an external system breach (hacking), occurred between March 2, 2021, and October 9, 2021, but was not discovered until December 9, 2022. The compromised information included names and financial account or credit/debit card numbers along with their security codes or PINs. Epic Management offered affected individuals 12 months of credit monitoring services through IDX.

Epic Management LLC reported to HHS on 2022-11-14 a Hacking/IT Incident affecting 10,050 individuals. Breached information located on Email. The covered entity ceased all operations and the investigation was closed.