Catholic Charities of the Diocese of Rockville Centre d/b/a Catholic Charities of Long Island

Catholic Charities of the Diocese of Rockville Centre, doing business as Catholic Charities of Long Island in New York, experienced a data breach that affected 13,000 patients. The breach was identified when unusual network activity was detected on September 3, 2023. Immediate steps were taken to disconnect access to the network. A third-party cybersecurity firm was engaged to investigate the incident, which confirmed that an unauthorized third party had gained access to the network through the Cisco AnyConnect VPN. The investigation revealed that sensitive information including names, addresses, dates of birth, Social Security numbers, driver’s license numbers, passports, and medical information was exposed and potentially acquired by the unauthorized actor.

The process of reviewing the affected files and identifying the individuals impacted was completed on October 24, 2023. Notification letters were then mailed to the affected individuals on November 2, 2023. In response to the breach, Catholic Charities has taken several steps to enhance their security measures, including the implementation of threat hunting and endpoint detection and response tools[4].

Citations:

1. https://catholiccharities.cc/pdfs/DataBreachNotice.pdf
2. https://www.jdsupra.com/legalnews/catholic-health-announces-third-party-7280678/
3. https://www.nysb.uscourts.gov/sites/default/files/opinions/304874_202_opinion.pdf
4. https://www.hipaajournal.com/healthcare-data-breach-round-up-november-16-2023/
5. https://www.hipaajournal.com/november-2023-healthcare-data-breach-report/
6. https://elibrary.law.psu.edu/cgi/viewcontent.cgi?article=1296&context=bankruptcy
7. https://casetext.com/case/the-roman-catholic-diocese-of-rockville-ctr-v-doe-in-re-the-roman-catholic-diocese-of-rockville-ctr
8. https://www.catholiccharities.cc
9. https://trellis.law/doc/146070024/notice-appeal-informational-statement-copy-order-proof-service
10. https://www.nysb.uscourts.gov/sites/default/files/opinions/304873_2024_opinion.pdf
11. https://www.doj.nh.gov/consumer/security-breaches/c.htm
12. https://www.reuters.com/legal/litigation/us-judge-considers-ending-stalled-new-york-diocese-bankruptcy-2023-07-11/
13. https://casetext.com/case/in-re-the-roman-catholic-diocese-of-rockville-ctr-3
14. https://apps.web.maine.gov/online/aeviewer/ME/40/list.shtml
15. https://www.newsday.com/long-island/bankruptcy-diocese-rockville-centre-o19927
16. https://caselaw.findlaw.com/court/us-ban-crt-s-d-new-yor/2207904.html
17. https://www.catholiccharities.cc/pdfs/compliance_manual.pdf
18. https://clearinghouse-umich-production.s3.amazonaws.com/media/doc/41376.pdf
19. https://trellis.law/doc/39137207/affidavit-affirmation-in-support-motion-001-affirmation-todd-r-geremia-in-support-diocese-rockville-centre-s-notice-motion-to-d-affirmation-todd-r-geremia-in-support-diocese-rockville-centre-s-notice-motion-to-d-sho
20. https://www.defensorum.com/data-breaches-at-medical-eye-services-peakmed-prospect-medical-services-and-4-more-healthcare-providers/