Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Data Breach at Independent Living Systems Impacts 4 Million Individuals

Health services company Independent Living Systems has disclosed a data breach that impacts more than 4 million individuals.

Florida-based health services company Independent Living Systems (ILS) has started sending out notification letters to more than 4 million individuals to inform them of a data breach impacting their personal and medical information.

Founded in 2001, ILS has 10 offices across the US and provides managed care organizations and providers with clinical and third-party administrative services. The company serves over 4.2 million individuals.

The data breach, the company says, was discovered on July 5, 2022, when some of its systems became inaccessible. Its investigation into the incident revealed that an unauthorized party had access to certain systems for roughly a week, between June 30 and July 5.

“During that period, some information stored on the ILS network was acquired by the unauthorized actor, and other information was accessible and potentially viewed,” the company explains in a data breach notice.

On January 17, ILS learned that the personally identifiable information (PII) and protected health information (PHI) of its members was compromised during the attack.

The types of impacted information include names, addresses, birth dates, driver’s license details, IDs, Social Security numbers, financial account information, medical record numbers, diagnosis information, health insurance information, mental or physical treatment, and other health information.

The company has started sending notification letters to all impacted individuals and says that some of them were informed of the data breach in September 2022, via a preliminary notice posted on its website.

ILS informed the Maine Attorney General’s office that the data breach impacted more than 4.2 million individuals.

Advertisement. Scroll to continue reading.

What the company has not said is what type of cyberattack it fell victim to. The fact that its systems became inaccessible suggests that file-encrypting ransomware was involved.

SecurityWeek has contacted ILS for additional clarifications on the incident and will update this article as soon as a reply arrives.

Related: 3.3 Million Impacted by Ransomware Attack at California Healthcare Provider

Related: Patient Information Compromised in Data Breach at San Diego Healthcare Provider

Related: Ransomware Hit 200 US Gov, Education and Healthcare Organizations in 2022

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

People on the Move

The City of Phoenix has promoted Mitch Kohlbecker to the role of Chief Information Security Officer.

Gigamon has promoted Tony Jarjoura to CFO and Ram Bhide has been hired as Senior VP of engineering.

Cloud security firm Mitiga has appointed Charlie Thomas as Chief Executive Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.