Acuity International

Acuity International, a healthcare entity based in Reston, VA, reported an external system breach (hacking) occurring between April 9, 2020, and October 22, 2020. The breach was discovered on September 30, 2020. The incident compromised the names and Social Security Numbers of approximately 122,710 individuals, including 679 Maine residents. Notification letters were sent to affected individuals in early 2022, offering 12 months of credit monitoring and identity theft protection services through Equifax.

Acuity International, LLC submitted a supplemental notice to the New Hampshire Attorney General regarding a cybersecurity incident involving unauthorized access to employee personal information. The breach, detected in September 2020 following fraudulent wire transfers, affected 488 New Hampshire residents. The incident involved the exfiltration of names and Social Security numbers. Acuity engaged forensic experts, notified the FBI, and provided credit monitoring services to affected individuals.

Acuity International, LLC reported a cyber intrusion affecting a subsidiary. Suspicious activity was detected in September 2020, but it was not until April 4, 2022, that the company learned personal information of current and former employees may have been accessed. The breach date listed on the CA OAG form is April 9, 2020. The company engaged cybersecurity experts, notified the FBI, and implemented enhanced network security. Complimentary identity protection services are being offered to affected individuals.

Acuity International subsidiary Comprehensive Health Services (CHS) reported a cybersecurity incident affecting 2,785 Washington residents. Unauthorized access occurred between April 9, 2020, and October 22, 2020, following suspicious activity detected on September 30, 2020. The breach involved names and Social Security numbers of current and former employees of CHS customers. CHS engaged forensic experts, notified the FBI, and provided credit monitoring services.

Comprehensive Health Services / Acuity International reported a data breach to the Indiana Attorney General. The breach occurred on 2020-04-09 and was reported on 2022-02-15. 1,267 Indiana residents were affected. 122,710 individuals affected in total.

ACUITY INTERNATIONAL filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-315). The register records the breach as discovered on February 15, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.