CareCentrix, Inc. reported that its business associate, American Medical Collection Agency, discovered unauthorized access to its web payment portal. The breach affected 467,621 individuals and the protected health information (PHI) involved included identification numbers, insurance information, names, dates of birth, addresses, phone numbers, social security numbers, and financial information. CareCentrix notified all affected individuals and the media, and dissolved its business associate relationship.
Affected (this filing): 467,621