Aveanna Healthcare has disclosed a data security incident that may have impacted data belonging to certain employees and patients. The incident, discovered on September 22, 2023, involved unusual activity associated with an Aveanna email account, prompting immediate security measures and engagement with cybersecurity experts for investigation. Subsequent findings revealed unauthorized access to the email environment on September 25, 2023, potentially compromising files containing personal information. A comprehensive review completed on March 12, 2024, identified varied personal and protected health information that may have been involved, including names, Social Security numbers, medical information, and more.
Following the discovery, Aveanna took swift action to address the incident and enhance security measures. While there is no evidence of misuse to date, Aveanna has initiated notifications to potentially impacted individuals, providing details of the incident and offering access to complimentary identity protection services through CyEx. Additionally, a toll-free call center has been established to address inquiries and concerns related to the incident, ensuring affected individuals receive necessary support and assistance.
Aveanna emphasizes its commitment to the privacy and security of all information in its possession, implementing measures to prevent similar incidents in the future. The organization remains dedicated to maintaining transparency and providing support to affected individuals throughout the resolution process.
