"Hopscotch Health Management in Illinois has recently reported a data breach to the HHS’ Office for Civil Rights that involved the protected health information of 4,945 patients. Unauthorized access to physical records was detected by Hopscotch on August 27, 2024. The records contained information about patients of Cannon Family Health, which now operates as Hopscotch Primary Care, and specifically patients who received healthcare services at its primary care facility at 6 Brooklet Street in Asheville, NC.
A bad actor with no affiliation with Hopscotch accessed the physical records. Law enforcement provided access to some of the impacted records on September 19, 2024, and Hopscotch confirmed they included billing statements that included name, the amount paid and identified the individual as a patient of Cannon Family Health, and for certain patients, documents that included patients’ names, addresses, contact information, and clinical information such as diagnoses, treatments, test results or medications. The bad actor has been detained by law enforcement and is now facing prosecution. Hopscotch said it is implementing policies and procedures to improve the protection of physical records."
https://www.hipaajournal.com/data-breaches-reported-by-hopscotch-athenahealth-central-resources/
"Hopscotch Health Management in Illinois has recently reported a data breach to the HHS’ Office for Civil Rights that involved the protected health information of 4,945 patients. Unauthorized access to physical records was detected by Hopscotch on August 27, 2024. The records contained information about patients of Cannon Family Health, which now operates as Hopscotch Primary Care, and specifically patients who received healthcare services at its primary care facility at 6 Brooklet Street in Asheville, NC.
A bad actor with no affiliation with Hopscotch accessed the physical records. Law enforcement provided access to some of the impacted records on September 19, 2024, and Hopscotch confirmed they included billing statements that included name, the amount paid and identified the individual as a patient of Cannon Family Health, and for certain patients, documents that included patients’ names, addresses, contact information, and clinical information such as diagnoses, treatments, test results or medications. The bad actor has been detained by law enforcement and is now facing prosecution. Hopscotch said it is implementing policies and procedures to improve the protection of physical records."