Ethan Health, LLC

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

It appears there was a data breach at Ethan Health, LLC in Richmond, Kentucky, where the protected health information (PHI) of 4,047 individuals was compromised. Suspicious activity was detected within Ethan Health’s email environment on August 31, 2022. A forensic investigation confirmed that the accounts were accessed between May 5, 2022, and September 8, 2022. It took seven months to investigate and review the contents of the accounts, a process that was completed on March 9, 2023. The information in the accounts varied from individual to individual and may have included names, dates of birth, driver’s license numbers, financial account information, medical information, and health insurance information. Ethan Health has offered affected individuals complimentary credit monitoring services for 24 months and has implemented additional security measures to prevent similar incidents in the future[3].

Citations:

  1. https://ethanhealth.org/privacy-policy/
  2. https://www.kroll.com/en
  3. https://www.hipaajournal.com/credential-stuffing-attack-exposed-united-healthcare-member-data/
  4. https://www.upmchealthplan.com
  5. https://www.nbcconnecticut.com/news/local/wellpoint-security-breach-puts-information-at-risk/1867008/
  6. https://www.foxnews.com/category/us/crime
  7. https://www.linkedin.com/in/ethan-mackin-72aab5180
  8. https://variety.com
  9. https://www.madisoncountyhealthdept.org/Documents/Inspections.pdf
  10. https://iida.org
  11. https://www.consumerfinancialserviceslawmonitor.com/2023/10/new-federal-district-court-decision-allows-secondary-liability-theory-under-tcpa-to-proceed/
  12. https://bleacherreport.com
  13. https://www.justice.gov/d9/2023-09/apogee.indictment.pdf
  14. https://www.lexingtonscsheriff.com
  15. https://violationtracker.goodjobsfirst.org/?agency_sum=OSHA&order=primary_offense&page=215&sort=desc
  16. https://en.wikipedia.org/wiki/Louisville,_Kentucky
Breach Submission Date Apr 14, 2023
Converted Entity Name Ethan Health, LLC
Converted Entity Type Healthcare Provider
State KY
Individuals Affected 4,047
Breach Type Hacking/IT Incident

Breach Information Location Email

Business Associate Present Yes