Reid and Riege, P.C.

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

Reid and Riege, P.C., a law firm based in Hartford, Connecticut, experienced a data breach that was first identified on March 21, 2022. The firm discovered that its network had been infected with malware from an external source. On May 27, 2022, Reid and Riege notified Johnson Memorial Hospital that the breach resulted in unauthorized access to certain systems containing the hospital’s data from March 21 to March 27. The specific details of the compromised data from the hospital are unknown. Patients have been advised not to speak with anyone claiming to be from Reid and Riege, Johnson Memorial Hospital, or Trinity Health of New England regarding the breach[1].

The breach notification submitted to the state of Maine indicates that a total of 408 individuals were affected by the breach, including one Maine resident. The breach was described as an external system breach (hacking), specifically ransomware, and involved personal identifiers in combination with financial account numbers or credit/debit card numbers. Reid and Riege provided 12 months of credit monitoring and identity restoration services through Experian to those affected. Notifications to consumers were made in writing on September 26, 2022[4][7].

Reid and Riege, P.C. is known for assisting clients with cybersecurity and patient privacy compliance, including compliance with HIPAA and other privacy laws and regulations. They also help clients with breach risk assessments and reporting requirements[3].

Citations:

  1. https://www.beckershospitalreview.com/cybersecurity/connecticut-hospital-warns-patients-about-third-party-data-breach.html
  2. https://casetext.com/case/evans-v-reid-riege-pc-no-cv930063465-dec
  3. https://www.rrlawpc.com/cybersecurity-patient-privacy-compliance
  4. https://apps.web.maine.gov/online/aeviewer/ME/40/fdcd9768-30cf-4f56-a23d-a842c1594b08.shtml
  5. https://www.jud.ct.gov/external/supapp/Cases/AROap/AP113/113AP213.pdf
  6. https://casetext.com/case/reid-riege
  7. https://apps.web.maine.gov/online/aeviewer/ME/40/9bb47fc2-266e-4a5b-af2c-54fdf976b1b6.shtml
  8. https://www.rrlawpc.com/RCAB7S126/assets/files/News/Health%20Care%20Alert%20-%20January%202018.pdf
Breach Submission Date Sep 28, 2022
Converted Entity Name Reid and Riege, P.C.
Converted Entity Type Business Associate
State CT
Individuals Affected 610
Breach Type Hacking/IT Incident

Breach Information Location Network Server

Business Associate Present Yes