EMS Management and Consultants Inc.

EMS Management and Consultants Inc. (a Business Associate, NC) reported to HHS on 2023-12-01 an Unauthorized Access/Disclosure affecting 2,654 individuals. An employee mailed PHI of individuals to wrong recipients. Breached information on Paper/Films included names, addresses, treatment information, and financial information. The BA notified HHS, affected individuals, and the media, and provided substitute notice. The covered entity implemented additional administrative safeguards as mitigation.

EMS Management and Consultants Inc. notified individuals of a data breach involving its MOVEit Transfer server. An unknown actor accessed the server on May 30, 2023, exfiltrating names and other personal information. EMS|MC engaged forensic specialists, patched the software, and offered credit monitoring. The incident is linked to the Progress Software MOVEit vulnerability.

EMS Management and Consultants, Inc. reported a data breach affecting 31 New Hampshire residents. An unknown actor accessed the MOVEit Transfer server on May 30, 2023, exploiting a vulnerability disclosed by Progress Software Corp. in May/June 2023. Personal information, including names and government IDs, was exfiltrated. EMS|MC discovered the incident on July 12, 2023, after a data review. Notices were sent to affected individuals on August 9, 2023, offering credit monitoring. EMS| engaged forensic specialists and patched the vulnerable software.

EMS Management and Consultants Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-10. 130 Massachusetts residents were affected. The report records the breach type as electronic.

EMS Management and Consultants Inc. reported an external system breach that occurred on May 30, 2023. The breach, discovered on July 12, 2023, affected 223,598 individuals. Compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on August 9, 2023, and offered 12 months of credit monitoring services through Experian.

EMS Management and Consultants Inc. notified Montana residents that an unknown actor accessed its MOVEit Transfer server on May 30, 2023, exfiltrating personal information including names and government IDs. The company engaged forensic specialists, patched the vulnerability, and is offering credit monitoring services to affected individuals.

EMS Management and Consultants Inc. notified consumers that an unknown actor accessed their Progress Software MOVEit Transfer server on May 30, 2023, and exfiltrated data. The breach affected 21 Rhode Island residents. The compromised data included names and other personal information related to medical billing services. EMS|MC patched the software, engaged third-party investigators, and offered credit monitoring.