New Partners, Inc. d/b/a VNS Health Personal Care

New Partners, Inc., doing business as VNS Health Personal Care in New York, experienced a data breach that involved unauthorized access to certain employee email accounts and associated files between August 10, 2023, and August 14, 2023. The breach was discovered on August 14, 2023, and VNS Health took immediate action to secure the accounts involved, launch an internal investigation, and engage a third-party cybersecurity firm to determine the scope of the unauthorized access[2].

The investigation revealed that the incident may have involved access to files containing patient information. However, it appears that the primary intent behind the unauthorized access was to defraud individual VNS personnel, rather than to obtain patient information. Despite this, the files potentially accessed may have contained sensitive information such as names, dates of birth, addresses, phone numbers, diagnosis and treatment information, and health insurance information. It is important to note that not all data elements were involved for all impacted individuals[2].

In response to the incident, VNS Health has implemented additional safeguards and measures to enhance the protection and monitoring of their systems. This includes technical systems enhancements, updated security policies and protocols, and staff education. VNS Health has also provided recommendations for affected individuals to monitor their statements from healthcare providers and immediately report any services they did not receive[2].

The breach has been reported to the U.S. Department of Health and Human Services Office for Civil Rights, as required by law. However, the specific number of individuals affected by the breach is not provided in the search results[1][2].

Citations:

1. https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf?adobe_mc=MCMID%3D02408406485458979789220680779370557994%7CMCORGID%3DA8833BC75245AF9E0A490D4D%2540AdobeOrg%7CTS%3D1696377600
2. https://www.vnshealth.org/vns-health-home-care-vns-health-hospice-care-and-vns-health-personal-care-notice-of-data-security-incident/
3. https://www.northwell.edu
4. https://www.vnshealth.org
5. https://www.vnshealthplans.org/notice-of-independent-living-systems-data-breach/
6. https://www.philstar.com
7. https://breachdata.topwords.me/states/NY
8. https://www.jdsupra.com/legalnews/vns-health-confirms-data-breach-at-tmg-7934022/
9. https://www.lionbridge.com
10. https://casetext.com/case/sutton-vincent-v-nyc-health-hospsharlem-hosp-ctr
11. https://www.myinjuryattorney.com/vns-health-data-breach-investigation/
12. https://www.plumbenefits.com
13. https://www.hipaajournal.com/august-2023-healthcare-data-breach-report/
14. https://www.hipaajournal.com/ransomware-groups-attack-3-healthcare-providers/
15. https://www.owler.com/company/vnshealth
16. https://www.justice.gov/usao-sdny/press-release/file/982261/dl
17. https://healthitsecurity.com/news/moveit-breach-notifications-continue-to-roll-in-impacting-health-data
18. https://breachdata.topwords.me/states/NY?limit=20&offset=40&sort=data_source
19. https://www.calhipaa.com/cyberattacks-on-liberty-hospital-4-over-llc-vns-health-and-lake-county-health-department/
20. https://www.justice.gov/usao-sdny/press-release/file/982256/dl