The Native American Health Center (NAHC) experienced a cybersecurity incident on November 19, 2023, which led to unauthorized access to sensitive personal information. Upon discovery, NAHC quickly disconnected network access and enlisted a third-party cybersecurity firm to investigate. In January 2024, it was confirmed that some files were accessed by an unauthorized actor.
The investigation revealed that personal information such as names, dates of birth, and medical information may have been compromised. However, Social Security Numbers were not affected. NAHC has not found evidence that the accessed information has been misused but is notifying affected individuals as a precautionary measure.
In response to the incident, NAHC has taken significant steps to enhance security, including replacing hard drives, using multifactor authentication, conducting annual HIPAA assessments, and improving physical security measures. These actions aim to prevent future breaches and protect the privacy of personal information.
Additionally, NAHC is offering affected individuals access to credit monitoring and fraud assistance services for twelve months at no cost. The organization advises those impacted to remain vigilant against identity theft and follow recommended steps to safeguard their information.
Reference:
