Apria Healthcare LLC

Apria Healthcare, LLC notified Delaware AG of a data breach involving unauthorized third-party access to its systems between April 2019 and October 2021. The attacker's goal was financial fraud, though patient/employee PII (including SSNs and DOBs) was potentially accessed. Apria engaged the FBI and forensic investigators, implemented security measures, and offered one year of Kroll identity monitoring services.

Apria Healthcare LLC reported a breach affecting 1,869,598 individuals, including 7,162 Maine residents. The incident occurred between April 4, 2019, and October 10, 2021, and was discovered on October 1, 2021. The breach involved unauthorized external access (hacking) resulting in the acquisition of names, personal identifiers, and financial account numbers. Apria provided 12 months of identity theft protection and credit monitoring via Kroll.

Affected (this filing): 1,869,598

Apria Healthcare LLC notified Delaware AG of unauthorized access to systems between April 2019 and October 2021. The attacker, motivated by financial gain, accessed systems containing patient/employee PII and credentials. Apria engaged the FBI and forensic investigators, implemented security measures, and offered one year of Kroll identity monitoring. No funds were stolen, and no proof of data exfiltration exists, though emails/files may have been accessed.

Apria Healthcare LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-05-22. The breach occurred from 8/27/2021 to 10/10/2021. 5 Montana residents were affected.

Affected (this filing): 5

Apria Healthcare LLC notified patients and employees of unauthorized access to systems containing personal and health information. The incident involved two periods of access: April 5, 2019 to May 7, 2019, and August 27, 2021 to October 10, 2021. Apria became aware of the breach on September 1, 2021. The attacker's motive was believed to be financial fraud against Apria, not data theft, though no proof of data exfiltration exists. Apria engaged the FBI and forensic investigators, implemented security enhancements, and offered one year of identity monitoring via Kroll.

Apria Healthcare LLC, a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2021-09-01 and filed notice on 2023-05-22. 69,686 Washington residents were affected. 628 days elapsed between awareness and notification. 880 days to identify the breach. 39 days to contain the breach.

Affected (this filing): 69,686

Apria Healthcare LLC notified New Hampshire residents of a security incident where an unauthorized third party accessed systems containing personal information between April 2019 and October 2021. The actor's intent was financial fraud; no evidence of funds removal or data exfiltration was found. 8,566 NH residents were affected. Apria engaged the FBI and forensic investigators, implemented security measures, and offered 12 months of Kroll identity protection services.

Affected (this filing): 8,566