250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Hackers stole patient information from Clover Health Investments and AngMar Management Services in July.
Healthcare organizations Clover Health Investments and AngMar Management Services are notifying more than 250,000 people that their information was stolen in separate data breaches.
Jersey City, New Jersey-based Clover Health Investments was hacked in early July, after attackers used social engineering to compromise three non-managerial health plan employee accounts.
The incident resulted in the theft of personally identifiable information (PII) and protected health information (PHI), the company said in an SEC filing in July.
The potentially affected information included names, dates of birth, insurance identifiers, and account identification numbers, the company revealed.
In mid-September, Clover Health Investments told the US Department of Health and Human Services (HHS) that 138,677 people were affected. HHS added the company to its data breaches portal last week.
Mansfield, Texas-based AngMar Management Services identified suspicious activity on its systems in mid-July and confirmed in early September that hackers stole patient PII and PHI.
AngMar Management Services provides business operations, administration, and support network management for home health and hospice care providers.
The impacted information includes names, birth dates, Social Security numbers, diagnosis details, medical history data, health insurance information, patient IDs, provider names, prescription details, and dates of service.
The Interlock ransomware group added AngMar Management Services to its Tor-based leak site in August, claiming to have stolen over 700 gigabytes of data.
On September 16, the company notified HHS that 126,196 individuals were affected. The company was added to HHS’s data breach portal last week.
