HealthEC LLC

HealthEC, a population health technology company, notified U.S. Renal Care, Inc. that an unknown actor accessed HealthEC's systems between July 14 and July 23, 2023, copying files containing patient names and health information. HealthEC secured systems, destroyed copied data, notified law enforcement, and offered credit monitoring. The incident is classified as a third-party supply chain breach involving unauthorized access and data exfiltration.

HealthEC LLC filing on behalf of its Covered Entity Client(S) reported a data breach to the Indiana Attorney General. The breach occurred on 2023-07-14 and was reported on 2023-12-22. 18 Indiana residents were affected. 112,005 individuals affected in total.

HealthEC LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-22. 35 Massachusetts residents were affected. The report records the breach type as electronic.

HealthEC LLC, a healthcare technology vendor, reported a data breach impacting its covered entity clients. The breach occurred from July 14 to July 23, 2023, and was discovered on October 24, 2023. The breach was described as an external system breach or hacking incident. Affected Maine residents were notified on December 22, 2023, and offered 12 months of credit monitoring and identity restoration services through TransUnion.

HealthEC, LLC, a population health technology company, notified individuals of a data incident where an unknown actor accessed systems and copied files between July 14 and July 23, 2023. The incident involved names and potentially other PII. HealthEC notified law enforcement, engaged in forensic review, and offered 12 months of credit monitoring. Approximately 451 Rhode Island residents were identified as potentially impacted.

HealthEC LLC reported to HHS on 2023-12-21 a Hacking/IT Incident affecting 4,786,241 individuals. Breached information located on Network Server. The incident compromised PHI including names, addresses, birthdates, SSNs, driver's license numbers, diagnoses, lab results, medications, and claims information.

HEALTHEC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-863). The register records the breach as discovered on July 14, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.