Anna Jaques Hospital is notifying over 316,000 individuals that their personal information was compromised in a December 2023 data breach.
The incident was identified on Christmas day last year and resulted in the hospital diverting patients from its emergency rooms after its health record system was shut down.
Anna Jaques initially disclosed the data breach on January 23, after a threat actor known as Money Message listed the hospital on its leaks site, claiming the theft of 600 gigabytes of data. The threat actor made the allegedly stolen data available for download days later.
In its initial incident notice, Anna Jaques, revealed that personally identifiable information (PII) and medical and insurance information were likely compromised in the attack.
In an updated notice on December 5, the hospital said that its forensic investigation and manual document review of the stolen data was completed in November, and that financial information might have been exfiltrated as well.
“The impacted information varies per individual; however, it may include demographic information, medical information, health insurance information, Social Security number, driver’s license number, financial information, and other personal or health information that you provided Anna Jacques,” the updated notice reads.
Last week, Anna Jaques notified the Maine Attorney General’s Office that 316,342 individuals might have been affected by the incident.
The hospital says it has no evidence that the stolen information might have been used for fraud, but is providing the potentially affected individuals with two years of free identity theft and credit monitoring services.
“Additionally, Anna Jaques reminds its employees and patients to remain vigilant in reviewing financial account statements on a regular basis for any fraudulent activity. Anna Jaques also recommends that its patients review the explanation of benefits statements that they receive from their health insurance providers and follow up on any items not recognized,” the hospital says.
Located in Newburyport, Massachusetts, Anna Jaques is a not-for-profit community hospital providing primary care, emergency care, and other healthcare services to the Merrimack Valley, North Shore, and Southern New Hampshire areas.
Related: 760,000 Employee Records From Several Major Firms Leaked Online
Related: Chemonics International Data Breach Impacts 260,000 Individuals
Related: DC Sues Zuckerberg Over Cambridge Analytica Privacy Breach
Related: NewsBlur Restores Service After Hacker Wipes Database
