Capital Region Medical Center

Capital Region Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-30. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Capital Region Medical Center (CRMC) experienced a cybersecurity incident on December 17, 2021, where an unauthorized third party gained access to files containing personal and health information of patients and employees. The incident affected four New Hampshire residents. Data exposed included names, dates of birth, addresses, medical information, health insurance information, and potentially Social Security and driver's license numbers. CRMC disabled its network, engaged forensic investigators, and notified law enforcement. Credit monitoring was offered to affected individuals.

Capital Region Medical Center, a healthcare organization, reported an external system breach (hacking) that occurred on December 17, 2021, and was discovered on December 24, 2021. The breach affected 7 Maine residents, involving the acquisition of names combined with driver's license or non-driver identification card numbers. The center began notifying affected individuals on March 24, 2022, and offered one year of complimentary credit monitoring services through Experian.

Capital Region Medical Center (CRMC) disclosed that on December 17, 2021, an unauthorized third party gained access to files containing personal and health information of CRMC employees. Data included names, DOB, addresses, medical info, health insurance info, SSNs, and driver's license numbers. CRMC disabled its network, engaged a cybersecurity firm, notified law enforcement, and offered one year of credit monitoring.

Capital Region Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2021-12-17 and was reported on 2022-03-24. 11 Indiana residents were affected. 17,578 individuals affected in total.

Capital Region Medical Center (Jefferson City, MO) reported to HHS OCR on 2022-03-11 a ransomware incident affecting 17,578 individuals. Breached information was located on a network server and included names, addresses, dates of birth, driver's license numbers, Social Security numbers, medical diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice, and implemented additional administrative, technical, and security safeguards, including staff retraining.