Pinnacle Claims Management

Pinnacle Claims Management, Inc. notified the California AG of a data security incident discovered on July 23, 2024. The incident resulted from the exploitation of a security vulnerability in Progress Software's MOVEit file transfer application, a third-party service provider. A comprehensive review of data was completed on October 23, 2024. Affected data may include names and other personal information. The company engaged third-party cybersecurity experts and implemented additional security measures.

Pinnacle Claims Management, a Business Associate (CA), reported to HHS on 2024-11-21 a Hacking/IT Incident (ransomware) affecting 1,119 individuals. Breached information was located on a Network Server. Compromised PHI included names, dates of birth, treatment information, and diagnoses. The BA notified HHS, affected individuals, and the media, provided substitute notice, and implemented additional technical safeguards.

Affected (this filing): 1,119