Security Experts:

Connect with us

Hi, what are you looking for?


Data Breaches

Data Breach at Independent Living Systems Impacts 4 Million Individuals

Health services company Independent Living Systems has disclosed a data breach that impacts more than 4 million individuals.

Florida-based health services company Independent Living Systems (ILS) has started sending out notification letters to more than 4 million individuals to inform them of a data breach impacting their personal and medical information.

Founded in 2001, ILS has 10 offices across the US and provides managed care organizations and providers with clinical and third-party administrative services. The company serves over 4.2 million individuals.

The data breach, the company says, was discovered on July 5, 2022, when some of its systems became inaccessible. Its investigation into the incident revealed that an unauthorized party had access to certain systems for roughly a week, between June 30 and July 5.

“During that period, some information stored on the ILS network was acquired by the unauthorized actor, and other information was accessible and potentially viewed,” the company explains in a data breach notice.

On January 17, ILS learned that the personally identifiable information (PII) and protected health information (PHI) of its members was compromised during the attack.

The types of impacted information include names, addresses, birth dates, driver’s license details, IDs, Social Security numbers, financial account information, medical record numbers, diagnosis information, health insurance information, mental or physical treatment, and other health information.

The company has started sending notification letters to all impacted individuals and says that some of them were informed of the data breach in September 2022, via a preliminary notice posted on its website.

ILS informed the Maine Attorney General’s office that the data breach impacted more than 4.2 million individuals.

What the company has not said is what type of cyberattack it fell victim to. The fact that its systems became inaccessible suggests that file-encrypting ransomware was involved.

SecurityWeek has contacted ILS for additional clarifications on the incident and will update this article as soon as a reply arrives.

Related: 3.3 Million Impacted by Ransomware Attack at California Healthcare Provider

Related: Patient Information Compromised in Data Breach at San Diego Healthcare Provider

Related: Ransomware Hit 200 US Gov, Education and Healthcare Organizations in 2022

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.


Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.


Expert Insights

Related Content


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

Data Breaches

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.


Instant Checkmate and TruthFinder have disclosed data breaches affecting a total of more than 20 million users.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

Companies affected by the recent Mailchimp data breach have started notifying customers. The list includes WooCommerce, FanDuel, Yuga Labs and the Solana Foundation.


Acer said one of its document servers was hacked after a hacker claimed to have stolen 160 Gb of data from the company.