ENKR

AdaptHealth patient data stolen after a social engineering attack

Add to my breach check

Made public · 4,115,802 people

What leaked4

Hard to replace

  • Health insurance or Medicare number
  • Other profile data

Permanent

  • Health information
  • Full name
  • Health insurance or Medicare numberhealth insurance information · the notice does not name an ID number
  • Other profile datacontact information · types not stated, demographic information

To-dos1 · about 15 min in all

  1. Check your health insurance statements for care you did not getabout 15 minHelps you notice: medical care in your name (opens in a new tab)

What happened next10 events

  1. Undetected 2 events10 days · show events
  2. Response 7 eventsNotice in 60 days · Back to latest
  3. Remedy 1 eventOngoing · show events
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 7 events

Back to latest
  1. Said it was not aware of any actual or attempted identity theft, fraud or other misuse of the data
  2. Breach report to HHS: 4,115,802 people
  3. By 14 August, notified every affected person for whom it had current contact details
  4. Notice posted on its website, listing the data that may have been involved
  5. By 2 July, disabled the compromised account, reset affected credentials and added access controls; incident contained
  6. SEC Form 8-K: the incident was judged material on 27 June; data was taken, including a stored password file for insurance billing
  7. Notified law enforcement after discovering the attack
Company
AdaptHealth
When it happened
Company detected it
Made public
Notice
Leak confirmed
Affected
4,115,802 people · AdaptHealth's report to HHS

Sources