Consumer Privacy & Data Breaches

January 27, 2023 – University of Colorado Hospital Authority (“UCHealth”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights on January 17, 2023 after learning of a data security incident involving Diligent Corporation, one of the company’s vendors. The company posted a notice on its website stating that confidential consumer information was exposed, including full names, dates

January 27, 2023 – Lutheran Social Services of Illinois filed a data breach notice with the Maine Attorney General on January 25, 2023 after learning of a ransomware attack on the company’s computer network. According to the filing, an unauthorized party gained access to sensitive consumer information like first and last names, Social Security numbers, dates of birth, driver’s license numbers, medical information, financial account information,

January 26, 2023 –

Jefferson County Health Center d/b/a Jefferson County Health, filed a notice of a data breach on January 13, 2023 with the U.S. Department of Health and Human Services Office for Civil Rights after discovering a security incident in which an unauthorized party gained access to confidential patient information on the company’s computer network. After confirming the data leak, Jefferson County sent notification letters

January 25, 2023 – Livingston Memorial VNA and affiliated companies Livingston Memorial Visiting Nurse Association and Livingston Caregivers, collectively known as “Livingston Memorial,” filed a notice of a data breach with the Attorney General of Montana on January 20, 2023 after learning of a ransomware attack on its computer network. According to the filing, an unauthorized party gained access to confidential consumer information. The company has not

January 25, 2023 – Bank of Eastern Oregon (“BEO”) filed a notice of a data breach with the Montana Attorney General on January 20, 2023 after company email accounts were accessed by an unauthorized third party. According to the filing, sensitive consumer information was accessed, but we don’t yet know the type of information accessed. After confirming the leak, BEO sent data breach notification letters to all

January 24, 2023 – Satellite Healthcare filed a notice of data breach on January 20, 2023 with the Attorney General of Texas after discovering a security incident in which an unauthorized party gained access to confidential information on the company’s computer network. Information accessed was consumers’ full names, protected health information, and financial account information. After confirming the data leak, Satellite sent notification letters to all

January 24, 2023 – Members Trust of the Southwest Federal Credit Union (“Members Trust”) filed notice of a data breach on January 20, 2023 with the Texas Attorney General after determining that an unauthorized party had gained access to confidential consumer information. According to the filing, consumer information accessed was names, Social Security numbers, driver’s license numbers, addresses, protected health information, and financial account information. After

January 21, 2023 – After discovering that confidential consumer information had been accessed by an unauthorized party, Insulet Corporation filed a data breach notice with the California Attorney General on January 5, 2023. According to the filing, consumers’ protected health information had been accessed. Once confirmed that there was a consumer data leak, Insulet sent out notification letters to all individuals affected by the data security breach.

January 20, 2023 – PayPal, Inc. filed a notice of data breach with the Attorney General of Maine on January 18, 2023 after discovering that consumer information had been leaked to an unauthorized party in a credential stuffing attack. According to the filing, information accessed included consumers’ first and last names, Social Security numbers, addresses, dates of birth, and individual tax identification numbers. Once PayPal confirmed

January 20, 2023 – Farmers Investment Company, dba Green Valley Pecan Company, filed notice of a data breach with the Maine Attorney General’s office on January 18, 2023 after consumer information was exposed to unauthorized parties in a security incident. According to the filing, the information that was accessed included first and last names, driver’s license numbers, Social Security numbers, financial information, medical information, and health

January 17, 2023 – Home Care Providers of Texas, referred to as “HCPT,” filed notice of a data breach on January 13, 2023 with the Texas Attorney General after discovering a security incident in which an unauthorized party gained access to confidential information on the company’s computer network. Information accessed was consumers’ full names, dates of birth, addresses, Social Security numbers, medication information, and diagnosis and

January 16, 2023 – Hayward Sisters Hospital, doing business as St. Rose Hospital, filed a notice of data breach on January 12, 2023 with the California Attorney General’s office after discovering that confidential patient information had been accessed and removed from the hospital’s computer system. According to the filing, patient information that was accessed included full names, dates of birth, home addresses, Social Security numbers, and

January 16, 2023 – Circles of Care, Inc. filed a notice of data breach on January 3, 2023 with the U.S. Department of Health and Human Services Office for Civil Rights after discovering that there was unauthorized access to confidential patient information within the company’s computer system. According to the filing, information accessed included patients’ names, Social Security numbers, dates of birth, addresses, driver’s license numbers,

January 13, 2023 – TruConnect filed a notice of data breach with the Maine Attorney General on January 11, 2023 after the company’s computer network was accessed and confidential consumer information was exposed. According to the filing, the information accessed was consumers’ names and Social Security numbers.

The data breach lawyers at Console & Associates, P.C. are actively investigating the TruConnect data breach that affected 54,200

January 13, 2023 – After learning that an unauthorized party had gained access to company email accounts, Community Psychiatry Management, LLC dba Mindpath Health filed a notice of data breach on January 10, 2023 with the Attorney General of Massachusetts. Per the filing, the information that was accessed was full names, dates of birth, addresses, Social Security numbers, health insurance information, prescription information, and medical diagnosis