Conifer Revenue Cycle Solutions, LLC, a business associate of USC, experienced a data security incident involving unauthorized access to a Microsoft Office 365 business email account. The unauthorized access occurred on January 20, 2022, and was discovered by Conifer on April 14, 2022. USC was notified on August 12, 2022. The incident potentially exposed personal information of 7 New Hampshire residents, including names, SSNs, financial account numbers, and health information. Conifer reset passwords, blocked malicious IPs, and accelerated MFA implementation. IDX provided 12 months of identity protection services.
Affected (this filing): 7