Perry Johnson & Associates (PJ&A), a medical transcription vendor, reported a data breach affecting Northwell Health, Crouse Health, and CarePoint Health. Unauthorized access occurred March 27–May 2, 2023, via compromised RDS credentials. The actor demanded ransom and exfiltrated PHI and PII. 867 New Hampshire residents were notified on November 3, 2023, with credit monitoring offered. PJ&A engaged forensic investigators and law enforcement.
Affected (this filing): 867