Medjet, a Birmingham-based air medical transport and travel security membership program, faced a significant cybersecurity incident starting October 17, 2023, when malware compromised certain systems. The forensic investigation confirmed unauthorized access and potential file acquisitions by December 5, 2023. A subsequent review completed on May 10, 2024, identified exposed information such as names, addresses, and Social Security numbers, affecting 14,400 clients, including 9 in Maine.
Initial notifications began in January 2024, with further notifications issued by June 3, 2024, as additional affected data was identified. Medjet responded by offering 12 months of credit monitoring and identity theft protection to impacted individuals and implementing stringent security measures like multifactor authentication. Despite the breach, Medjet continues to fortify its cybersecurity posture through ongoing reviews and enhancements.
In a similar vein, Native American Health Center in California encountered a cybersecurity incident in November 2023, leading to unauthorized access to names, dates of birth, and medical information. They responded swiftly with network security measures and engaged forensic experts to investigate. By May 28, 2024, affected individuals were notified and offered credit monitoring services, reflecting proactive cybersecurity measures and ongoing HIPAA compliance efforts.
Similarly, Angels Neurological Centers in Maine detected suspicious activity in April 2024, promptly containing the breach and engaging cybersecurity professionals for forensic analysis. Unauthorized access to patient information was confirmed, prompting notifications to 934 affected individuals by June 5, 2024. Angels Neurological Centers continues to bolster security with enhanced authentication measures and regular assessments to safeguard patient data and maintain regulatory compliance.