Southwest Healthcare Services

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

Southwest Healthcare Services, based in Bowman, North Dakota, experienced a data breach that compromised the personal information of its patients. The health system discovered the incident on January 31, 2023, and identified that an unauthorized party accessed the files between October 28 and 29, 2022. The compromised information includes names, dates of birth, addresses, Social Security numbers, driver’s license numbers, health insurance information, and protected health information (PHI)[1][4].

In response to the breach, Southwest Healthcare Services has taken steps to secure its network and has engaged outside cybersecurity professionals to investigate the incident further. The health system has begun sending out data breach notification letters to all individuals whose information was compromised. Additionally, they are offering affected customers identity theft protection services to mitigate the potential impact of the breach[1].

Southwest Healthcare Services is a non-profit healthcare services provider that was created in 2001, with the consolidation of St. Luke’s Tri-State Hospital and Sunset Care Corporation. It operates various healthcare facilities, including Sunrise Village Assisted Living, the Sunset Nursing Home, and the Southwest Medical Clinic. The organization employs more than 138 people and generates approximately $27 million in annual revenue[4].

The breach at Southwest Healthcare Services highlights the ongoing challenges healthcare organizations face in protecting sensitive patient information from unauthorized access and potential misuse. It also underscores the importance of robust cybersecurity measures and prompt response strategies to mitigate the impact of such incidents on affected individuals[1][4].

Citations:

  1. https://www.beckershospitalreview.com/cybersecurity/north-dakota-health-system.html
  2. https://www.prnewswire.com/news-releases/southwest-health-center-provides-notice-of-data-security-incident-301581026.html
  3. https://www.prnewswire.com/news-releases/southwest-behavioral-health-center-provides-notice-following-data-security-incident-302063397.html
  4. https://www.jdsupra.com/legalnews/southwest-healthcare-services-announces-1734352/
  5. https://www.turkestrauss.com/2023/11/20/southwest-behavioral-health-center-data-breach-investigation/
  6. https://swhealthcare.net/patient/notice-of-data-security-incident.html
  7. https://healthitsecurity.com/news/tallahassee-memorial-provides-healthcare-data-breach-notice
  8. https://swhealthcare.net
  9. https://potterhandy.com/southwest-behavioral-health-center-sbhc-data-breach-lawsuit
  10. https://www.jdsupra.com/legalnews/data-breach-alert-southwest-health-inc-4738180/
  11. https://classlawdc.com/2023/11/20/southwest-behavioral-health-center-data-breach-investigation/
  12. https://ago.vermont.gov/sites/ago/files/2023-04/2023-03-31%20Southwest%20Healthcare%20Services%20Data%20Breach%20Notice%20to%20Consumers.pdf
  13. https://www.itpro.com/security/data-breaches/368463/southwest-health-center-hit-by-data-breach
  14. https://www.hipaajournal.com/one-brooklyn-health-notifies-patients-about-november-2022-cyberattack/
Breach Submission Date Apr 01, 2023
Converted Entity Name Southwest Healthcare Services
Converted Entity Type Healthcare Provider
State ND
Individuals Affected 15,996
Breach Type Hacking/IT Incident

Breach Information Location Network Server

Business Associate Present Yes