Asheville Eye Associates and Delta County Memorial Hospital District last week disclosed separate data breaches that impacted hundreds of thousands of individuals.
On Friday, Asheville Eye Associates said the personal and medical information of a subset of its patients was compromised as a result of a cybersecurity incident.
The potentially compromised information, the North Carolina eye care center said, includes names, addresses, medical treatment information, and health insurance information. The incident did not impact Social Security numbers, credit card numbers, or financial information.
“While the investigation has not identified any instances of fraud or identity theft that have occurred as a result of this incident, AEA recommends that individuals review any statements they receive from their health care providers or health insurers to ensure their accuracy,” the eye care provider said.
The provider has told the US Department of Health and Human Services that 193,306 individuals were impacted by the data breach.
The DragonForce ransomware group claimed in late December 2024 that it had stolen hundreds of gigabytes of data from Asheville Eye Associates.
On Friday, non-profit hospital district Delta County Memorial Hospital informed the Maine Attorney General’s Office that hackers had compromised the personal information of 148,363 people in a May 2024 cyberattack.
According to the hospital’s written notification to the impacted individuals, hackers had access to its network between May 27 and May 30, and may have acquired certain files from its systems.
Personal information contained in those files includes names, dates of birth, addresses, phone numbers, Social Security numbers, driver’s license numbers, medical and health insurance information, and financial information.
The hospital is providing the affected people with one year of free identity theft and credit monitoring services.
“While we have no reason to believe this information has been misused, we want to make you aware of the incident and provide information about what you can do to protect yourself, should you feel it is appropriate to do so,” Delta’s notification letter reads.
Related: 1 Million Impacted by Data Breach at Connecticut Healthcare Provider
Related: CISA, FDA Warn of Dangerous Backdoor in Contec Patient Monitors
Related: Privacy Firm Finds Unsecured Cannabis Patient Information
Related: Ho, Ho, Hoooold on a Minute: A New Year Resolution That IoT Isn’t a Gift That Keeps on Taking
