CodeMetro

CodeMetro, a provider of software solutions to applied behavior analysis providers, suffered a ransomware attack on April 21, 2020. The attackers accessed a database server, copied and removed health-related patient information including names, contact details, school information, insurance data, and medical records. CodeMetro contained the threat, engaged forensic investigators, notified law enforcement, and offered one year of credit monitoring to affected individuals.

CodeMetro suffered a ransomware attack on April 21, 2020, which was detected within hours. Attackers accessed a database server, copied and removed data, and deployed ransomware. Affected data included health-related patient information (PHI), personal identifiers (SSN, DOB), school information, and employee payroll data. CodeMetro engaged forensic investigators, notified law enforcement, and offered one year of credit monitoring via TransUnion.

CodeMetro, Inc. reported to HHS on 2020-06-19 a Hacking/IT Incident affecting 62,807 individuals. Breached information located on Network Server. The cyber-attack affected electronic protected health information (ePHI) including names, SSNs, addresses, DOB, diagnoses, and insurance data. CodeMetro acted as a Business Associate. Response included notifying HHS, individuals, and media, workforce retraining, and implementation of technical safeguards.

Affected (this filing): 62,807

CodeMetro reported a data breach to the Montana Attorney General. The breach was reported on 2020-06-19. The breach occurred on 4/21/2020.