In June 2023, SouthCoast Health experienced a cyberattack affecting its network. Unauthorized access occurred between June 15 and June 18, with files being viewed or copied by an unauthorized third party. The breach was contained within SouthCoast Health’s network, though some patient information from Privia Medical Group was exposed.
Despite the breach being limited to SouthCoast Health, Privia Medical Group patients’ information was also compromised. The specifics of the compromised data were not initially clear but were detailed in individual notifications. The review of affected files was completed in June 2024, revealing the extent of the exposure.
SouthCoast Health has since implemented additional security measures to prevent future incidents. They have offered complimentary credit monitoring and identity theft protection to those affected by the breach. The HHS Office for Civil Rights breach portal currently reports 501 affected individuals.
A substitute notice was posted on SouthCoast Health’s website in 2023, but the exact number of affected patients and data types were initially unknown. The organization’s strict security measures were bypassed, prompting enhanced protocols to safeguard against similar threats in the future.