EMS Management and Consultants Inc.

EMS Management and Consultants Inc. (a Business Associate, NC) reported to HHS on 2023-12-01 an Unauthorized Access/Disclosure affecting 2,654 individuals. An employee mailed PHI of individuals to wrong recipients. Breached information on Paper/Films included names, addresses, treatment information, and financial information. The BA notified HHS, affected individuals, and the media, and provided substitute notice. The covered entity implemented additional administrative safeguards as mitigation.

EMS Management and Consultants Inc reported to HHS on 2023-08-10 a Hacking/IT Incident affecting 223,598 individuals. Breached information located on Network Server. The business associate experienced a ransomware attack compromising PHI including names, addresses, DOB, SSNs, and financial/treatment data. The BA notified HHS, individuals, and media, and implemented additional safeguards.

EMS Management and Consultants, Inc. reported a data breach affecting 31 New Hampshire residents. An unknown actor accessed the MOVEit Transfer server on May 30, 2023, exploiting a vulnerability disclosed by Progress Software Corp. in May/June 2023. Personal information, including names and government IDs, was exfiltrated. EMS|MC discovered the incident on July 12, 2023, after a data review. Notices were sent to affected individuals on August 9, 2023, offering credit monitoring. EMS| engaged forensic specialists and patched the vulnerable software.

EMS Management and Consultants Inc. reported an external system breach that occurred on May 30, 2023. The breach, discovered on July 12, 2023, affected 223,598 individuals. Compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on August 9, 2023, and offered 12 months of credit monitoring services through Experian.

EMS Management and Consultants Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-10. The breach occurred on 5/30/2023. 17 Montana residents were affected.

EMS Management and Consultants Inc. disclosed that an unknown actor accessed its MOVEit Transfer server on May 30, 2023, exploiting a vulnerability in the Progress Software tool. The breach exposed names and government IDs (SSNs) of approximately 21 Rhode Island residents. EMS|MC engaged forensic specialists, patched the system, and offered credit monitoring via Experian.