Centerstone of Tennessee, Inc.

Centerstone of Tennessee, Inc. notified the New Hampshire Attorney General of a data security incident involving one NH resident. Unauthorized access to an employee email account occurred on January 8, 2022, likely via phishing. The breach exposed names and Social Security numbers. Centerstone discovered the activity on February 14, 2022, and notified the resident on September 12, 2022. Remediation included credential resets, policy revisions, and offering 12 months of credit monitoring.

Centerstone of Tennessee, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2022-09-14. The breach occurred from 1/8/2022 to 2/14/2022. 2 Montana residents were affected.

Centerstone of Tennessee, Inc. reported to HHS on 2022-09-12 a Hacking/IT Incident affecting 3,675 individuals. An employee was subjected to an email phishing attack that compromised PHI including names, dates of birth, driver's license and Social Security numbers, addresses, claims, and financial information. Breached information was located in Email. The CE notified HHS, affected individuals, and the media, and implemented additional administrative and technical security measures.

Centerstone of Tennessee, Inc. reported an external system breach (hacking) occurring on 12/12/2019, discovered on 08/25/2020. The incident compromised names and Social Security Numbers of 51,860 individuals. Centerstone notified affected individuals in writing on 10/22/2020 and provided 12 months of credit monitoring and identity theft recovery services through IDX.

Centerstone of Tennessee, Inc. reported to HHS on 2020-10-23 a Hacking/IT Incident affecting 50,965 individuals. Breached information located on Email. Employees were victims of an email phishing attack exposing ePHI including names, addresses, DOB, driver's license numbers, SSNs, diagnoses, lab results, and medications.