Aveanna Healthcare LLC data breach (2020)

GAHHS OCRFirst filing

Filed Feb 14, 2020bd_16f4b4559fe49649

Aveanna Healthcare (GA) reported to HHS on 2020-02-14 a Hacking/IT Incident affecting 166,077 individuals via an email phishing attack. Compromised ePHI included names, dates of birth, driver's license numbers, addresses, phone numbers, SSNs, clinical information, financial information, and health insurance information. Breached information located in Email. The CE notified HHS, affected individuals, and the media, implemented additional technical safeguards, and retrained staff. OCR provided technical assistance and obtained corrective-action assurances.

Affected (this filing): 166,077

🐻California State AG

🌲Washington State AGlinked via same-victim cross-source · 100%

Filed Feb 14, 2020bd_d63cfe491add01db

Aveanna Healthcare, a health sector entity reported a unclear/unknown incident to the Washington Attorney General. The organization became aware of the incident on 2019-08-24 and filed notice on 2020-02-14. 2,444 Washington residents were affected. 174 days elapsed between awareness and notification. 46 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 2,444

WA AG >90d

🦬Montana State AG

Filed Feb 14, 2020bd_dedaafa6f4714218

Aveanna Healthcare reported a data breach to the Montana Attorney General. The breach was reported on 2020-02-14. The breach occurred from 7/9/2019 to 8/24/2019. 15 Montana residents were affected.

Affected (this filing): 15

Aveanna Healthcare LLC

Litigation Timing

Sensitive data

Affected residents by state

Timeline