Connect with us

Hi, what are you looking for?


Data Breaches

4.5 Million Individuals Affected by Data Breach at HealthEC

HealthEC says personal information received from business partners was compromised in a July 2023 data breach.

Health technology company HealthEC has disclosed a data breach impacting close to 4.5 million customers of its business partners.

HealthEC provides population health management services, delivering analytics and insights to help healthcare organizations improve patient outcomes.

In an incident notice published on its website just before December, the company explained that, between July 14, 2023, and July 23, 2023, an unauthorized actor accessed certain systems and exfiltrated files entrusted to HealthEC by its business partners.

The stolen files contained personal information such as names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information.

According to HealthEC, its review of the stolen data was completed at the end of October 2023, when it started notifying customers and working with them on notifying the potentially impacted individuals.

While the notification does not say how many individuals were affected, HealthEC informed the US Department of Health and Human Services that the attackers stole the information of close to 4.5 million people.

Impacted HealthEC business partners and customers include Alliance for Integrated Care of New York, Advantage Care Diagnostic & Treatment Center, Beaumont ACO, Corewell Health, Community Health Care Systems, Compassion Health Care, Division of TennCare, East Georgia Healthcare Center, HonorHealth, Hudson Valley Regional Community Health Centers,  Illinois Health Practice Alliance, KidneyLink, Long Island Select Healthcare, Metro Community Health Centers, Mid Florida Hematology & Oncology Centers, P.A, State of Tennessee, University Medical Center of Princeton Physicians’ Organization, and Upstate Family Health Center, Inc.

On December 22, 2023, HealthEC and its business partners started sending out notification letters to the impacted individuals, advising them to remain vigilant against possible identity theft and fraud attacks, to review account and benefits statements, and to monitor free credit reports for any suspicious activity.

Advertisement. Scroll to continue reading.

Related: Over 900k Impacted by Data Breach at Defunct Boston Ambulance Service

Related: LoanCare Notifying 1.3 Million of Data Breach Following Cyberattack on Parent Company

Related: Inmate, Staff Information Stolen in Rhode Island Prison Data Breach

Written By

Ionut Arghire is an international correspondent for SecurityWeek.


Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Gain valuable insights from industry professionals who will help guide you through the intricacies of industrial cybersecurity.


Join us for an in depth exploration of the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects.


Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

KFC and Taco Bell parent company Yum Brands says personal information was compromised in a January 2023 ransomware attack.