Lynwood Manor Patients Notified About 2021 Data Breach
CRG Lynwood, LLC, an Adrian, MI-based healthcare provider that operates the Lynwood Manor skilled nursing and rehabilitation center has issued notification letters to 6,566 individuals whose data was compromised in a cyberattack that was first detected almost three years ago on July 12, 2021.
The cyberattack occurred at a business associate of Lynwood Manor that provided administrative services, including backend operations, staffing, and network infrastructure to Lynwood Manor and various other senior assisted living facilities. The investigation concluded that Lynwood Manor data was not involved, but 14 months later in September 2022, Lynwood Manor was notified that residents’ data had been accessed. Lynwood Manor published a substitute breach notice on its website in November 2022, where it remained while Lynwood Manor worked with a data mining vendor to determine the individuals affected and the types of data involved.
The data mining process took until January 31, 2024, to complete, and on February 1, 2024, a third-party notice vendor was engaged to assist with the mailings. Lynwood Manor then worked on verifying the patient information and mailing addresses to allow individual notifications to be sent. They were mailed to the affected individuals on June 7, 2024. Lynwood Manor said, “The data mining process took some time given the complexities of the types and formatting of the data analyzed, requiring multiple phases of automated and manual review.”
The compromised data included names, medical information, driver’s license numbers, and other ID card information. Lynwood Manor said it is unaware of any actual or attempted misuse of the data. As a precaution, the affected individuals have been offered 12 months of complimentary credit monitoring and identity theft protection services. Lynwood Maner said it has implemented additional monitoring tools and will continue to evaluate and enhance the security of its systems.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
