More than 4.1 million individuals had their personal, health, and insurance information stolen in a data breach at healthcare company AdaptHealth.
Operating over 680 facilities across the US, AdaptHealth describes itself as a network of medical equipment companies that provides patients with healthcare solutions and medical equipment.
The company was hacked in early June, when a threat actor gained access to its cloud-based applications, including internal systems used for patient management and document storage.
After the attacker contacted the company, it confirmed the data breach, including the theft of a password file associated with insurance billing.
The hacker used social engineering to compromise a user session at a third-party contractor, AdaptHealth said.
On August 14, the company announced that the threat actor had exfiltrated names, contact and demographic information, and health and health insurance information.
The company said Social Security numbers and financial information were not affected.
At the time, it also notified the US Department of Health and Human Services (HHS) that 4,115,802 individuals were affected. HHS added AdaptHealth to its data breach portal this week.
Another major healthcare data breach reported to the HHS on August 14 and recently added to the portal affected clinical genomics company Baylor Genetics.
Like AdaptHealth, Baylor Genetics was hacked in June, and hackers stole patients’ names, dates of birth, medical test data, health insurance information, and Social Security numbers. The PII of Baylor Genetics’ employees was also compromised in the incident, along with their financial information.
Overall, hackers stole the electronic protected health information of 2,810,878 individuals, Baylor Genetics told the HHS.
Related: Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Related: 153 Million Driver License Images Offered on Dark Web
