In January 2024, several Ernest Health Rehabilitation Hospitals were victims of a data breach, compromising the sensitive information of numerous patients.
The data breach at Ernest Health and its affiliated hospitals occurred when an unauthorized party gained access to the company's IT network. Between January 16, 2024, and February 4, 2024, the hackers were able to infiltrate the system and access sensitive patient information.
Ernest Health promptly initiated an investigation upon discovering the breach and engaged the assistance of third-party data security specialists to assess the extent of the incident. The company also reported the breach to law enforcement authorities to aid in pursuing the perpetrators.
The data breach at Ernest Health has potentially affected the personal information of millions of patients. The compromised data encompasses a wide range of sensitive details, including identifiable information, medical records, and insurance data. This breach puts the affected individuals at risk of identity theft, fraudulent activities, and other privacy-related concerns.
To mitigate the impact on patients, Ernest Health has begun sending out data breach notification letters to all individuals whose information was compromised. These letters outline the specific details of the breached information and guide the necessary steps patients can take to protect themselves from potential harm.
The company filed a notice of the breach with the Attorney General of Massachusetts and has been working diligently to investigate the incident and mitigate further risks.
In addition to notifying affected individuals, Ernest Health has been in frequent communication with its impacted customers, providing support and guidance on responding to the breach. The company has placed emphasis on its commitment to cybersecurity, pledging to enhance its investments in this area to prevent future incidents and safeguard patient information.
The data breach affected several hospitals owned by Ernest Health. The following is a list of the affected facilities:
If you have received a data breach notification letter from Ernest Health, it is recommended that you take immediate action to protect yourself from potential fraud or identity theft. Here are some steps you can take: