Perry Johnson & Associates

Perry Johnson & Associates, Inc. (PJ&A), a medical transcription services company, reported a data breach impacting 42,220 Maine residents. An unauthorized party gained access to its systems between March 27, 2023, and May 2, 2023. The breach was discovered on May 2, 2023, with the involvement of Protected Health Information (PHI) confirmed on May 22, 2023. The compromised data includes names and Social Security Numbers. The company provided notice to affected individuals and offered at least 12 months of identity theft protection services.

Perry Johnson & Associates (PJ&A), a medical transcription vendor, experienced unauthorized access to systems containing patient information for Concentra Health Services between March 27 and May 2, 2023. PJ&A detected suspicious activity on May 2, 2023. The breach impacted PHI and PII. PJ&A engaged third-party cybersecurity specialists and offered credit monitoring to affected individuals.

Perry Johnson & Associates, a vendor to The South Bend Clinic, LLC, notified patients of a data security incident. Unauthorized third-party access to PJ&A systems occurred between April 7 and April 19, 2023, impacting personal health information including names. PJ&A became aware of the incident on May 2, 2023. The investigation determined that Social Security numbers were not impacted. PJ&A retained cybersecurity vendors, notified law enforcement, and implemented additional security measures.

Perry Johnson & Associates, Inc. (PJ&A), a healthcare transcription service provider and HIPAA business associate, experienced unauthorized access to personal health information (PHI) between April 7 and April 19, 2023. The incident was discovered on May 2, 2023. Affected data included names, dates of birth, addresses, medical record numbers, diagnoses, and potentially Social Security numbers and clinical information. PJ&A engaged external cybersecurity vendors, notified law enforcement and HHS, and implemented technical restrictions and password resets. No evidence of identity theft or fraud was identified at the time of notification.

Perry Johnson & Associates, Inc. (PJ&A), a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2023-05-02 and filed notice on 2023-11-03. 22,088 Washington residents were affected. 185 days elapsed between awareness and notification. 36 days to identify the breach. 0 days to contain the breach.

Perry Johnson & Associates (PJ&A), a medical transcription vendor, reported a data breach affecting Northwell Health, Crouse Health, and CarePoint Health. Unauthorized access occurred March 27–May 2, 2023, via compromised RDS credentials. The actor demanded ransom and exfiltrated PHI and PII. 867 New Hampshire residents were notified on November 3, 2023, with credit monitoring offered. PJ&A engaged forensic investigators and law enforcement.

Perry Johnson & Associates, Inc. (PJ&A) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-11-03. The breach occurred during 3/27/2023 - 5/2/2023. The breach was discovered on 5/22/202310/12/2023. 3,891,565 individuals were affected. Notice was sent on 11/3/2023.