New England Life Care, Inc.

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

New England Life Care, Inc., a healthcare organization providing home infusion therapy and specialty pharmacy services, experienced a data security incident that was detected on May 24, 2023. The breach was discovered on July 25, 2023, and affected a total of 13 individuals, including 3 Maine residents[3]. The breach involved an external system breach (hacking) and resulted in the unauthorized acquisition of personal information, including names in combination with Social Security Numbers[3].

The affected individuals were notified of the breach in writing on August 29, 2023, and were offered one year of credit monitoring and identity theft protection services provided by Experian[3]. New England Life Care has since implemented additional safeguards and technical security measures to prevent similar incidents in the future[5].

The HIPAA Journal reported that the breach affected 51,854 records, and the exposed files contained patient data such as names, addresses, service/equipment information, and patient status (active/discharged)[5]. The breach was also mentioned in the July 2023 Healthcare Data Breach Report, which classified it as a hacking/IT incident[9].

New England Life Care is affiliated with over 50 of New England’s premier medical centers and serves communities in Massachusetts, New Hampshire, Maine, and Vermont[1]. The organization is recognized as a nonprofit, mission-driven provider[1][11].

Citations:

  1. https://www.nelifecare.org
  2. https://www.harvardpilgrim.org
  3. https://apps.web.maine.gov/online/aeviewer/ME/40/6c854a62-01d3-4ec4-b265-02d77b8d6f28.shtml
  4. https://www.humana.com
  5. https://www.hipaajournal.com/700000-highly-sensitive-school-records-exposed-online/
  6. https://www.bluecrossma.org
  7. https://apps.web.maine.gov/online/aeviewer/ME/40/list.shtml
  8. https://www.tricare.mil
  9. https://www.hipaajournal.com/july-2023-healthcare-data-breach-report/
  10. https://securityaffairs.com/158969/malware/raspberry-robin-1-day-exploits.html
  11. https://www.linkedin.com/company/new-england-life-care
  12. https://www.arbella.com
  13. https://www.cbinsights.com/company/new-england-life-care
  14. https://www.hubinternational.com
  15. https://dojmt.gov/consumer/databreach/
Breach Submission Date Jul 21, 2023
Converted Entity Name New England Life Care, Inc.
Converted Entity Type Healthcare Provider
State ME
Individuals Affected 51,854
Breach Type Hacking/IT Incident

Breach Information Location Network Server

Business Associate Present Yes