The Richards Group

The Richards Group (VT, Business Associate) reported to HHS on 2021-01-28 a Hacking/IT Incident affecting 15,429 individuals. An employee was the victim of an email phishing attack that compromised PHI including names, addresses, dates of birth, Social Security numbers, diagnoses, and health insurance and treatment information. Breached information located in Email. The CE notified HHS, affected individuals, and the media, offered credit monitoring, and retrained staff on email security.

Affected (this filing): 15,429

The Richards Group, a commercial entity, experienced an external system breach (hacking) on May 1, 2020. The breach was discovered on November 24, 2020, and affected 48 Maine residents. The compromised information included names and financial account or credit/debit card numbers. In response, The Richards Group began notifying affected individuals on January 20, 2021, and offered 12 months of identity theft protection services through Experian.

Affected (this filing): 48