Health Aid of Ohio Security Incident Affects up to 141,00 Individuals
Health Aid of Ohio, a Parma, OH-based full-service home medical equipment provider, has discovered unauthorized individuals gained access to its systems and exfiltrated some files from its network. The breach was detected on February 19, 2021 when suspicious network activity was detected. Action was quickly taken to eject the attackers from the network and secure all patient data.
An investigation into the breach confirmed that files were accessed and exfiltrated from Health Aid’s systems, but it was not possible to determine exactly which files had been removed from its systems. It is possible that some of the exfiltrated files contained the protected health information of VA plan members.
That information potentially included names, addresses, telephone numbers, and details of the type of equipment delivered to houses or was repaired in individuals’ homes. The protected health information of individuals who received services through their insurance carrier or healthcare provider included names, telephone numbers, dates of birth, Social Security numbers, insurance information, diagnosis information, and equipment type.
While the above information may have been stolen, no reports have been received to suggest there has been any fraudulent misuse of any of the above information to date.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Health Aid of Ohio has not disclosed how the attackers gained access to its systems and whether malware or ransomware was involved. The Federal Bureau of Investigation has been notified and appropriate authorities informed. The breach report submitted to the HHS’ Office for Civil Rights indicates up to 141,149 individuals have potentially been affected.
