US healthcare org admits up to 400,000 people's personal info was snatched

Gryphon Healthcare reported a "recent data security incident" in which an unauthorized actor accessed systems of a customer and may have exposed sensitive personal and medical information — including names, dates of birth, addresses, Social Security numbers, medical diagnoses, treatments, prescriptions, insurance details and medical record numbers — for about 393,358 people; the company detected the incident in August, began notifying affected individuals, offered 12 months of credit monitoring, and faces potential class-action litigation.