Law Enforcement Health Benefits, Inc.
Your Personal Info Could Be
Exposed Online After
This Hospital Breach
Breach Description
Law Enforcement Health Benefits, Inc. Data Breach
On September 14, 2021, Law Enforcement Health Benefits, Inc. (LEHB) detected a ransomware infection that began encrypting files on their network. LEHB, which provides health and welfare benefits for Philadelphia police officers, sheriffs, and their families, immediately launched an investigation with the help of external cybersecurity professionals[1][4][7].
Details of the Breach
The investigation revealed that on February 25, 2022, certain files containing personal information might have been removed from LEHB’s network by the perpetrator. The compromised data included names, dates of birth, Social Security numbers, driver’s license numbers, financial account numbers, health insurance information, and medical information such as medical record numbers, patient account numbers, and diagnosis/treatment information. Not all members had information impacted, and not all data elements were affected for each individual[1][4][7].
Response to the Breach
LEHB has been notifying affected individuals to enable them to take protective measures. The organization has offered complimentary credit monitoring services to those whose Social Security numbers were involved. LEHB has also advised individuals to remain vigilant by reviewing their financial account statements and credit reports for any unauthorized activity and to monitor insurance statements for any fraudulent transactions[1][4].
Legal and Consumer Protection Information
Affected individuals have been provided with information on how to protect themselves from identity theft, including contacting credit bureaus to place fraud alerts or security freezes on their credit files. LEHB has also provided contact information for consumer protection agencies in various states, such as Maryland, New York, North Carolina, and Oregon, as well as the Federal Trade Commission (FTC) for further assistance[1].
Impact and Legal Actions
The breach impacted over 85,000 individuals, and LEHB has taken additional steps to secure its network and improve internal procedures to prevent future threats. There have been investigations into the breach, and affected individuals have been exploring their legal options, including the possibility of a class action lawsuit[4][7][16].
Preventative Measures
LEHB has been assessing and updating its internal policies and procedures to minimize the risk of similar incidents in the future. The organization has taken the incident seriously and is committed to the security of personal information[1][7].
For further assistance or to report identity fraud, affected individuals can contact the dedicated call center set up by LEHB or reach out to the provided consumer protection agencies[1].
Citations:
- https://www.lehb.org/lehb_website_notice_10210783x7AB84.pdf
- https://www.trendmicro.com/vinfo/us/security/definition/data-breach
- https://hbr.org/2023/05/the-devastating-business-impacts-of-a-cyber-breach
- https://www.jdsupra.com/legalnews/data-breach-alert-law-enforcement-5714953/
- https://usa.kaspersky.com/resource-center/definitions/data-breach
- https://www.cloudmask.com/blog/data-breaches-threats-and-consequences
- https://healthitsecurity.com/news/law-enforcement-health-benefits-plan-ransomware-attack-impacts-85k
- https://www.ftc.gov/business-guidance/resources/data-breach-response-guide-business
- https://www.nedigital.com/en/blog/data-breach-consequences
- https://www.doj.nh.gov/consumer/security-breaches/documents/law-enforcement-health-benefits-20220331.pdf
- https://www.fortinet.com/resources/cyberglossary/data-breach
- https://www.fisglobal.com/en/insights/merchant-solutions-worldpay/article/how-the-consequences-of-a-data-breach-threaten-small-businesses
- https://www.mychesco.com/a/news/pennsylvania/significant-health-care-data-breaches-you-should-know-about-in-pennsylvania/
- https://www.csoonline.com/article/534628/the-biggest-data-breaches-of-the-21st-century.html
- https://www.theamegroup.com/security-breach/
- https://www.sauderschelkopf.com/investigations/law-enforcement-health-benefits-data-breach-class-action-lawsuit-investigation/
- https://en.wikipedia.org/wiki/Data_breach
- https://bigid.com/blog/the-costly-impact-of-a-data-breach-on-individuals/
- https://portswigger.net/daily-swig/us-healthcare-data-breach-impacts-85-000-law-enforcement-officers
- https://www.cloudflare.com/learning/security/what-is-a-data-breach/
- https://riskxchange.co/349/5-ways-data-breaches-affect-organisations/
- https://caselaw.findlaw.com/pa-commonwealth-court/1651092.html
- https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/what-data-breach-and-what-do-we-have-do-case-data-breach_en
- https://thrivedx.com/resources/article/4-damaging-data-breach-effects