Bloom Health Centers Provides Notice of Data Security Incident

Bloom Health Centers disclosed that on November 1, 2023 it detected suspicious activity in an employee email mailbox; an investigation confirmed unauthorized access to that mailbox and a subsequent review found patient PHI (names, addresses, insurance and medical information) and, for a limited subset, sensitive identifiers such as SSNs, payment card numbers, and driver’s license numbers may have been exposed. The organization secured the mailbox, engaged forensic and review teams, completed notifications and address verification by June 2024, and states it has no current evidence of misuse while offering a toll-free contact line and enhanced security measures.