Affordacare Urgent Care Clinics

Supplemental notice to NH AG regarding Affordacare Urgent Care Clinics ransomware incident. Maze ransomware attack occurred ~Feb 1, 2020, discovered Feb 3, 2020. 1 NH resident affected. Data included PHI, SSNs, names, DOBs. Patients notified March 30, 2020; offered 12 months credit monitoring. Systems secured; no longer storing data on internal servers.

Affordacare Urgent Care Clinics reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-04-14. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Affordacare Urgent Care Clinics experienced a Maze ransomware attack on or around February 1, 2020. Hackers accessed servers and removed confidential information, affecting one New Hampshire resident. Affected data included names, addresses, dates of birth, visit details, and insurance information. Electronic health records and SSNs were not affected. The ransom was not paid. Affected servers were segregated, and additional safeguards were implemented. Patients were notified on March 30, 2020, and offered 12 months of credit monitoring.

Affordacare Urgent Care Clinics reported to HHS on 2020-03-31 a Hacking/IT Incident (ransomware attack) affecting 57,411 individuals. Breached ePHI located on a Network Server included names, addresses, telephone numbers, dates of birth, health insurance information, and treatment information. The CE notified HHS, affected individuals, and the media, and implemented remediation measures.

Affordacare Urgent Care Clinics notified patients of a ransomware attack on February 1, 2020. Hackers accessed servers and exfiltrated confidential information including names, DOBs, insurance details, and treatment codes. The ransom was not paid. Affected individuals were offered 12 months of identity theft protection.

Affordacare Urgent Care Clinics reported a data breach to the Indiana Attorney General. The breach occurred on 2020-02-01 and was reported on 2020-03-27. 23 Indiana residents were affected. 55,338 individuals affected in total.