BrightSpring Health Services

BrightSpring Health Services notified affected individuals of a cybersecurity incident where an unknown third party accessed systems from March 12-13, 2023. The company discovered suspicious activity on March 14, 2023. Employee personal information was compromised. The company engaged cybersecurity advisors and offered one year of identity monitoring through Kroll.

BrightSpring Healthcare Services, Inc. reported an external system breach (hacking) occurring March 12-13, 2023, discovered May 20, 2023. The incident affected 535,203 individuals, including 547 Maine residents. Acquired data included names and Social Security Numbers. BrightSpring provided 12 months of credit monitoring services through Kroll.

BrightSpring Health Services, Inc. disclosed a ransomware incident affecting employee data, including names, SSNs, addresses, and DOBs. Unauthorized access occurred March 12-13, 2023; discovered March 14, 2023. 28,194 Washington residents affected. Remediation included enhanced security measures and 1-year Kroll identity monitoring.

BrightSpring Health Services, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-11. 2,382 Massachusetts residents were affected. The report records the breach type as electronic.

BrightSpring Health Services notified consumers of a cybersecurity incident where an unknown third party accessed systems from March 12-13, 2023. The breach exposed names, Social Security numbers, addresses, and dates of birth. No financial or health information was compromised. The company engaged cybersecurity advisors, enhanced security measures, and offered one year of Kroll identity monitoring.

BrightSpring Health Services, Inc. reported that an unknown third party accessed its computer systems from March 12-13, 2023. The company discovered suspicious activity on March 14, 2023. The incident involved employee personal information, including names, Social Security numbers, and for some, addresses and dates of birth. Financial and health information were not involved. The company engaged cybersecurity advisors, enhanced technical security measures, and offered one year of identity monitoring through Kroll.

BrightSpring Health Services reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-11. The breach occurred during 3/12/2023 - 3/13/2023. The breach was discovered on 5/20/2023. 535,203 individuals were affected. Notice was sent on 6/21/20238/11/2023.

BrightSpring Health Services notified individuals of a cybersecurity incident where an unknown third party accessed systems from March 12-13, 2023. Suspicious activity was detected on March 14, 2023. The incident involved employee personal information, including names, Social Security numbers, addresses, and dates of birth. No financial or health information was compromised. The company engaged cybersecurity advisors and is offering one year of identity monitoring.

BrightSpring Health Services, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-21. 22 Massachusetts residents were affected. The report records the breach type as electronic.

BrightSpring Health Services, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-12 and was reported on 2023-06-21. 37,646 Indiana residents were affected. 535,203 individuals affected in total.

AMERITA/PHARMERICA CORP./BRIGHTSPRING HEALTH SERVICES filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-615). The register records the breach as discovered on March 14, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.