Continuum Health Alliance data breach (2024)

Breach window

Oct 18, 2023

When the intrusion reportedly occurred, per the linked filings

142 days

Breach discovered

Mar 8, 2024

Reported by HHS OCR, MAINE AG filings

NJHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Apr 1, 2024bd_a76511431956e7f5

Continuum Health Alliance, LLC (NJ), a business associate, reported to HHS OCR on 2024-04-01 a Hacking/IT Incident affecting 377,119 individuals. Breached information was located on a Network Server. Exposed PHI included names, addresses, dates of birth, Social Security numbers, drivers' license numbers, diagnoses/conditions, and other treatment information. The BA notified HHS, media, and affected individuals, provided substitute notice, offered credit monitoring, and implemented additional administrative, technical, and security safeguards.

Affected (this filing): 377,119

HHS notified

🦞Maine State AGMost recentlinked via same-victim cross-source · 100%

Filed Apr 30, 2024bd_c6fec7754655a23a

Continuum Health Alliance, LLC reported an external system breach that occurred on October 18, 2023, and was discovered on March 8, 2024. The incident affected 377,119 individuals, compromising names and Social Security numbers. Notification letters were sent to affected residents on April 29, 2024, including offers for 12 months of credit monitoring and identity protection services from TransUnion.

Affected (this filing): 377,119

Continuum Health Alliance

Litigation Timing

Sensitive data

Timeline