American Anesthesiology, Inc. data breach (2021)

NEW YORKHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Jan 8, 2021bd_1c89d410047f27b1

American Anesthesiology, Inc. (NY) reported to HHS on 2021-01-08 a Hacking/IT Incident affecting 1,269,074 individuals. Multiple employees of its business associate experienced an email phishing attack. PHI exposed included names, dates of birth, Social Security and driver's license numbers, diagnoses, lab results, medications, and financial/treatment information. Breached information located on Email. The BA implemented additional safeguards and all staff were retrained on email security.

Affected (this filing): 1,269,074

🦫Oregon State AGlinked via same-victim cross-source · 100%

🦞Maine State AGlinked via same-victim cross-source · 100%

Filed Jan 8, 2021bd_6905374190db86e6

American Anesthesiology, Inc. experienced an external system breach between June 17, 2020, and June 22, 2020. The incident, discovered on July 16, 2020, affected 1,159,841 individuals. The breach involved an external system compromise (hacking), and the company offered one year of credit monitoring from Experian to individuals whose Social Security number was potentially exposed. Consumer notifications were sent during the week of January 11, 2021.

Affected (this filing): 1,159,841

ME AG >90d · 176dME resident >60d · 179d

🐻California State AGlinked via same-victim cross-source · 100%

Filed Jan 8, 2021bd_c1cbfd29ce17dc04

American Anesthesiology, Inc. notified California regulators of a security event involving its business associate, MEDNAX Services, Inc. An unauthorized party accessed Microsoft Office 365 email accounts via phishing between June 17 and June 22, 2020. Patient personal information, including names, SSNs, health insurance details, and medical records, was stored in the compromised accounts. The breach was contained, and affected patients were offered credit monitoring.

American Anesthesiology, Inc.

Litigation Timing

Sensitive data

Timeline