Comprehensive Health Services

Comprehensive Health Services reported a data breach affecting 602 Maine residents. The breach, which occurred between April 9, 2020, and October 22, 2020, was discovered on September 30, 2020. The incident involved an external system breach (hacking), resulting in the acquisition of names and Social Security numbers. The company began notifying affected individuals on February 15, 2022, and offered 12 to 24 months of credit monitoring and identity theft protection services through Equifax.

Comprehensive Health Services (CHS) disclosed a cyber intrusion affecting invoicing files pre-dating 2019. The breach occurred between April 9, 2020, and October 22, 2020, with unauthorized access discovered on November 3, 2021. The incident involved the unauthorized acquisition of personal information, including names and contact details, of current and former employees of client agencies. CHS engaged cybersecurity experts and reported the incident to the FBI. Remediation included deploying endpoint detection and response tools, replacing threat monitoring vendors, and offering 24 months of complimentary credit monitoring and identity protection through Equifax to affected individuals.

Comprehensive Health Services reported a data breach to the Oregon Attorney General. The breach was reported on 2022-03-16. The breach occurred during 4/9/2020 - 10/22/2020. The breach was discovered on 9/30/2020. 95,297 individuals were affected. Notice was sent on 2/15/20223/14/2022.

Comprehensive Health Services (CHS) submitted a supplemental notice to the New Hampshire Attorney General regarding a data security incident. The breach involved unauthorized access to invoicing files containing names and Social Security numbers of approximately 428 New Hampshire residents (employees of CHS customers). The incident was detected on September 30, 2020, following fraudulent wire transfers, and confirmed on November 3, 2021. CHS engaged forensic experts, notified the FBI, and offered credit monitoring services to affected individuals.

Comprehensive Health Services, a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2020-09-30 and filed notice on 2022-02-15. 2,785 Washington residents were affected. 503 days elapsed between awareness and notification. 174 days to identify the breach. 22 days to contain the breach.

Comprehensive Health Services (FL) reported to HHS on 2022-02-15 a Hacking/IT Incident (email phishing scheme) affecting 106,752 individuals. Several employees were victims of a phishing attack that compromised PHI including names, Social Security numbers, and drug testing invoices. Breached information located on Email. The CE notified HHS, individuals, and media; offered credit monitoring; and implemented additional administrative and technical safeguards.

Comprehensive Health Services, a healthcare organization, reported an external system breach affecting 94,449 individuals. The incident occurred between April 9, 2020, and October 22, 2020, and was discovered on September 30, 2020. The compromised data included names and Social Security numbers. The company began notifying affected individuals in writing on February 15, 2022, and offered 12 to 24 months of identity theft protection services through Equifax.

Comprehensive Health Services reported a data breach to the Montana Attorney General. The breach was reported on 2022-02-15. The breach occurred on 9/30/2020. 335 Montana residents were affected.

Comprehensive Health Services reported a cyber intrusion affecting current and former employees of client agencies. The breach involved unauthorized access to invoicing files pre-dating 2019, potentially exposing personal information. CHS engaged forensic experts, notified the FBI, and implemented enhanced security measures including new EDR tools and penetration testing. Affected individuals were offered credit monitoring.

Comprehensive Health Services reported a data breach to the Oregon Attorney General. The breach was reported on 2022-02-15. The breach occurred during 4/9/2020 - 10/22/2020. The breach was discovered on 9/30/2020. 94,449 individuals were affected. Notice was sent on 2/15/2022.