OnePoint Patient Care

OnePoint Patient Care reported to HHS on 2024-10-14 that a hacking attack on its network server affected 1,741,152 individuals. The compromised information included names, Social Security numbers, addresses, diagnoses/conditions, medications, and treatment information. In response, the entity notified HHS, affected individuals, and the media, and updated its technical safeguards. OCR provided technical assistance to the entity following an investigation.

Affected (this filing): 1,741,152

OnePoint Patient Care detected suspicious activity on its network on August 8, 2024. An investigation revealed that an unauthorized third party accessed patient data between August 6 and August 8, 2024. Affected data includes names, addresses, medical record numbers, diagnoses, Social Security numbers, and prescription information. The company engaged forensic investigators, contained the incident, notified law enforcement, and is offering one year of credit monitoring to affected individuals.