TRINITY HEALTH CORPORATION

Trinity Health, a multi-institutional Catholic health care system, disclosed a security incident involving its third-party vendor, Accellion. On January 29, 2021, Accellion notified Trinity Health of a flaw in its File Transfer Appliance. An unknown user exploited this vulnerability to download files containing protected health information (PHI), including patient names, addresses, dates of birth, medical record numbers, and financial data. Trinity Health took the appliance offline, launched an investigation, and offered one year of complimentary credit monitoring and identity theft restoration services to affected patients.

Trinity Health reported an external system breach (hacking) occurring on January 20, 2021, discovered on February 4, 2021. The incident compromised the personal information of 586,869 individuals, including names and Social Security Numbers. Trinity Health notified affected individuals in writing on April 5, 2021, and provided 12 months of credit monitoring services through Kroll. Three Maine residents were specifically identified as affected.

Affected (this filing): 586,869