Data breach at healthcare tech firm impacts 4.5 million patients

HealthEC, a population health management provider, disclosed a July 14–23, 2023 data breach that exposed personal and medical information for approximately 4,452,782 individuals across 17 healthcare customers; stolen data reportedly includes names, addresses, dates of birth, Social Security or taxpayer IDs, medical record numbers, diagnoses, prescription and insurance details, and billing information. The company completed its investigation on October 24, 2023, recommends monitoring for identity theft and fraud, and affected organizations listed include Corewell Health, HonorHealth, Beaumont ACO and several state health systems.