"Adventist Health has recently announced that the protected health information of more than 70,000 patients of Adventist Health Tulare in California has been accessed by an unauthorized individual. The security breach occurred at a business associate, Signature Performance, which was used to collect payments for services.
Adventist Health said Signature Performance identified suspicious activity within its network, and the forensic investigation confirmed that patient information had been accessed; however, Adventist Health said the data was not used for illegal activity. It is unclear how that determination was made.
Notification letters are being mailed to the affected individuals by Signature Performance, and the notification letters will state for each individual the types of information involved.
There is currently no substitute breach notice on the website of the California Attorney General from either Adventist Health or Signature Performance, but there is a substitute notice on the website of the Maine Attorney General. That breach notice was added on February 9, 2024, and relates to unauthorized access between January 17 and January 18, 2024, that was detected on January 18. The notice states that 7,122 individuals were affected and credit monitoring services are being offered. It is currently unclear if this is the same incident and more people are now known to have been affected or if this is a separate incident."
https://www.hipaajournal.com/70000-adventist-health-tulare-patients-data-breach/
"Adventist Health has recently announced that the protected health information of more than 70,000 patients of Adventist Health Tulare in California has been accessed by an unauthorized individual. The security breach occurred at a business associate, Signature Performance, which was used to collect payments for services.
Adventist Health said Signature Performance identified suspicious activity within its network, and the forensic investigation confirmed that patient information had been accessed; however, Adventist Health said the data was not used for illegal activity. It is unclear how that determination was made.
Notification letters are being mailed to the affected individuals by Signature Performance, and the notification letters will state for each individual the types of information involved.
There is currently no substitute breach notice on the website of the California Attorney General from either Adventist Health or Signature Performance, but there is a substitute notice on the website of the Maine Attorney General. That breach notice was added on February 9, 2024, and relates to unauthorized access between January 17 and January 18, 2024, that was detected on January 18. The notice states that 7,122 individuals were affected and credit monitoring services are being offered. It is currently unclear if this is the same incident and more people are now known to have been affected or if this is a separate incident."