Consumer Privacy & Data Breaches

April 21 – West Technology Group, LLC (WTG) confirmed on April 18, 2023, that an unauthorized third party was able to access and delete personal employee information from the business’s computer network, prompting the company to submit a notification of data breach with the Attorney General of Maine. According to the company’s official report, the event led to the disclosure of workers’ names and Social Security numbers

April 20 – Bryant Bank reported a data breach to the Montana Attorney General on April 18, 2023, after discovering that a third party had gained access to sensitive client data held on the bank’s servers. According to the company’s official report, the breach exposed the names, birth dates, driver’s license numbers, passport numbers, Social Security numbers, health insurance information, medical information, and financial details of

April 20 – The parent company of Traditions Bank, Traditions Bancorp, Inc., discovered on April 17, 2023, that an unauthorized individual had deleted files from the bank’s computer system that contained sensitive customer information, prompting the company to file a notice of data breach with the Attorney General of Massachusetts. According to the company’s formal complaint, the breach exposed customers’ names, dates of birth, addresses, Social Security

April 20 – Shields Health Care Group, Inc. (Shields) reported a data breach to the Attorney General of Maine on April 19, 2023, after discovering that a cyberattack had exposed sensitive consumer data on the company’s computer system. According to the company’s report, the breach exposed consumers’ names, home addresses, dates of birth, Social Security numbers, insurance information, patient identification, medical information, diagnosis and treatment information,

April 19 – When La Clinica de La Raza (La Clinic) discovered that some employee email accounts containing sensitive patient information had been accessed by an unauthorized party over a two-week period, a notice of data breach was filed with the U.S. Department of Health and Human Services Office for Civil Rights (HHS-OCR) on April 7, 2023. According to the company’s official report, the breach exposed the

April 19 – After discovering that sensitive data held on the school’s SharePoint platform had been accessed by an unauthorized individual, University of the People (UoPeople) sent a notification of data breach to the Maine Attorney General on March 24, 2023. According to the company’s report, the event led to the disclosure of customers’ names and Social Security numbers to a third party. UoPeople started distributing data

April 19 – John Muir Health (JMH) reported a data breach to the California Attorney General on April 13, 2023, after discovering that sensitive patient information had been compromised due to an error. According to the company’s official report, as a consequence of the event, a third party gained access to the protected health information of some of the company’s customers. Once it was determined that customer

April 19 – NationsBenefits Holding, LLC, upon realizing that it and its customers had been compromised by a data breach at Fortra, the company filed a notification of data breach with the Montana Attorney General on April 13, 2023. According to the company’s official report, the event led to the disclosure of private and sensitive customer information to a third party. Once it was determined that customer

April 18 – There were rumors in the media in February 2023 that Southeastern Louisiana University (“Southeastern”) had a cyberattack due to administrative statements. However, Southeastern did not report any breach at the time, leaving students, professors, and the public in the dark. But since then, a well-known ransomware group has added Southeastern Louisiana University to its list of victims, raising even more alarm. As yet, no

April 18 – Using tracking and authentication technologies, Medtronic MiniMed, Inc. and MiniMed Distribution Corp. (collectively referred to as Medtronic Diabetes or Medtronic) disclosed confidential consumer information to unauthorized parties on April 14, 2023, prompting the companies to file a notice of data breach with the Montana Attorney General. According to the company’s official report, the event led to the disclosure of consumers’ names, phone numbers, protected

April 18 – There were rumors of a data breach at CommScope Holding Firm, Inc. on April 17, 2023, when the company experienced what it considers to be a ransomware attack. Employee names, phone numbers, emails, mailing addresses, financial information, and Social Security numbers have apparently been exposed; however, CommScope has not yet issued a data breach statement detailing this information.  After CommScope has determined whether or

April 18 – Beacon Health System issued a notification of data breach on March 10, 2023, after discovering an employee was illegally accessing patient files containing sensitive information. According to the company’s announcement, the breach exposed customers’ names, birth dates, Social Security numbers, mailing addresses, and maybe even their medical records. Beacon started distributing data breach notification letters to all persons affected once it was confirmed

April 15 – After discovering on March 30, 2023 that sensitive customer data in its possession had been breached, Santa Clara Family Health Plan (SCFHP) notified the Office for Civil Rights of the United States Department of Health and Human Services. According to the company’s official report, the breach exposed users’ protected health information, which may include medical records, current and former prescriptions, health insurance information, and

April 15 – After discovering on April 11, 2023 that an employee’s credentials had been used to access client 2021 tax filings, resulting in false 2022 tax returns being filed on behalf of select patients, Harding, Shymanski & Company, PSC (HSC) notified the Montana Attorney General of a data breach. According to the official report filed by the firm, the event led to the exposure of customers’

April 15 – After discovering on April 12, 2023 that sensitive employee data had been exposed due to a “network interruption,” Unlimited Care, Inc. (UCI) notified the Attorney General of Maine of the breach. The firm has reported that due to the breach, someone gained access to the names, addresses, Social Security numbers, and birth dates of its customers. UCI started mailing data breach notification letters