MNGI Digestive Health is notifying over 765,000 individuals that their personal information was compromised in an August 2023 data breach.
The incident occurred on August 20, 2023, but it took MNGI almost one year to determine that personal and protected health information was accessed.
According to the healthcare provider, it has been diligently collecting the impacted individuals’ address information to provide them with written notifications of the data breach.
MNGI reveals in a data breach notice on its website that the potentially compromised information includes names, dates of birth, Social Security numbers, driver’s license and state ID numbers, passport numbers, biometric data, health insurance information, and medical information.
The threat actors also accessed payment card information, financial account information, taxpayer ID numbers, patient account numbers, and usernames and passwords.
“Please note that MNGI has no evidence of the misuse or attempted misuse of any potentially impacted information,” the healthcare provider says.
MNGI also informed the Maine Attorney General’s Office that it started sending notification letters via mail to 765,937 individuals this week, to inform them of the data breach.
The company is providing the impacted people with 12 months of free credit and identity protection services.
Although MNGI did not share details on the type of cyberattack it fell victim to, in September 2023 the Alphv/BlackCat ransomware group claimed responsibility for hacking the healthcare provider.
An independent group of certified gastroenterologists, MNGI operates roughly a dozen clinics and endoscopy centers around the Twin Cities metro area, providing inpatient therapeutic and interventional procedures, including endoscopic ultrasound and ERCP.
Related: Evolve Bank Data Breach Impacts 7.6 Million People
Related: Hackers Steal Personal Information From Pharma Giant Cencora
Related: 300k Affected by Year-Old Data Breach at Florida Community Health Centers
Related: Report: California Gun Data Breach Was Unintentional
