AllCare Health, Inc.

Allcare Medical Management, Inc. reported a data breach to the California Attorney General. The incident occurred on April 16, 2024. The notification letter, with an enrollment deadline of August 30, 2024, offers 12 months of Experian IdentityWorks credit monitoring to affected individuals. The specific nature of the breach, data types exposed, and number of affected individuals are not detailed in the provided HTML summary or the redacted attachment pages.

Allcare Medical Management, Inc. reported unauthorized access to an employee email account between March 4 and April 20, 2024. The incident was detected on May 23, 2024. The breach potentially exposed PHI, SSNs, and other PII for patients of Family Planning Associates Medical Group, Inc. Allcare engaged forensic investigators, secured the account, and is offering credit monitoring.

Allcare Medical Management Incorporated, a business associate based in CA, reported to HHS on 2024-07-22 a Hacking/IT Incident (email phishing) affecting 16,378 individuals. An employee was the subject of an email phishing scheme that exposed PHI including names, dates of birth, Social Security numbers, and other demographic information. Breached information located on Email. The BA notified HHS, affected individuals, and media; implemented additional safeguards; and retrained staff on email security. OCR provided technical assistance.

AllCare Health, Inc. reported to HHS on 2020-12-28 a Hacking/IT Incident affecting 5707 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack affecting ePHI including names, DOB, member ID, and treatment info.