Vail Health Services

Vail Health Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-09-12. 4 Massachusetts residents were affected. The report records the breach type as electronic.

Vail Health Services (CO) reported to HHS on 2022-05-04 a Hacking/IT Incident affecting 41,889 individuals. Multiple employees were victims of an email phishing attack exposing PHI including names, dates of birth, addresses, diagnoses, passport numbers, health insurance information, drivers' license numbers, Social Security numbers, and clinical information. Breached information located on Email and Network Server. The CE retrained staff on email security and implemented additional technical safeguards. OCR provided technical assistance regarding HIPAA Privacy and Security Rule obligations.

Vail Health Services notified patients of a security incident where an unauthorized third party accessed a restricted network location containing COVID-19 test results and PHI. Access occurred on Feb 11, 2022; discovered April 5, 2022. Data included names, DOB, contact info, and test results. No SSN or financial data. Third-party experts engaged; systems secured.

Vail Health Services notified the NH AG of a ransomware attack on vendor Kronos (Dec 11, 2021). Vail Health discovered the incident on Dec 13, 2021. Potential exposure of employee PII (SSN, DOB, bank info). 5 NH residents notified on Jan 14, 2022. Credit monitoring offered. No confirmation of data compromise yet.

Vail Health Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-01-18. 17 Massachusetts residents were affected. The report records the breach type as electronic.

Vail Health notified Montana residents of a data security incident involving third-party vendor Kronos, which suffered a global ransomware attack. While no confirmation of data access was received, the notification letter dated January 14, 2022, listed potentially involved data types including SSNs, DOBs, and bank info. Vail Health offered 12 months of Experian IdentityWorks.

Vail Health Services, a healthcare organization, reported an external system breach (hacking) that occurred on December 11, 2021, and was discovered on December 13, 2021. The breach affected 5 Maine residents, compromising their names and Social Security Numbers. Affected individuals were notified in writing on January 14, 2022, and offered identity theft and credit monitoring services through Experian.

Vail Health Services reported a data breach to the Indiana Attorney General. The breach occurred on 2021-12-11 and was reported on 2022-01-14. 11 Indiana residents were affected. 4,028 individuals affected in total.