- Healthcare software program ConnectOnCall hit with an information breach
- Over 900,000 sufferers knowledge was accessed over three months
- This leaves sufferers susceptible to id theft
Software program agency Phreesia has notified 914,138 people whose private and well being data was uncovered by an information breach in Might 2023 after utilizing its ConnectOnCall software program, which offers an after hours name service between sufferers and docs.
An investigation has revealed an unknown third get together had entry to ConnectOnCall knowledge between February 16 and Might 12 20203, which means delicate provider-patient communications have been compromised – together with medical information, prescription data, full names, and cellphone numbers, with a ‘small quantity’ of social safety numbers additionally uncovered.
The incident has taken ConnectOnCall providers offline till the service could be totally assessed and restored, and Phreesia is partaking with legislation enforcement to ascertain the potential affect.
The dangers for sufferers
ConnectOnCall has provided id and credit score monitoring providers, however solely to the purchasers who’ve had social safety numbers uncovered For these not included, one of the best id theft safety may be of some assist.
Though there’s no proof to date of malicious exercise in reference to the breach, unknown actors accessing well being knowledge at all times poses vital danger.
“The ConnectOnCall service stays offline, and we’re working diligently to evaluate the potential affect and restore the service,” the agency’s assertion mentioned.
“Whereas ConnectOnCall shouldn’t be conscious of any misuse of private data or hurt to sufferers on account of this incident, doubtlessly impacted people are inspired to stay vigilant and report any suspected id theft or fraud to your well being plan or insurer, or monetary establishment.”
The information is the newest in a collection of healthcare breaches in 2024, with cybercriminals concentrating on the business due to the delicate nature of the information saved, and the vital nature of the service supplied.
