An American healthcare provider called ARcare has admitted that it suffered a data breach attack from a group of malicious threat actors. The healthcare institution has branches in Mississippi, Arkansas, and Kentucky, and a representative of the organisation revealed that the breach may have impacted nearly 350,000 individuals.
According to the data breach alert provided by the institution, ARcare experienced a data security incident that involved its computer systems last February. The published data breach alert also provided discounted medical care in underserved communities by deploying pharmacies, school-based clinics, and medical centres.
The representative of the affected firm also stated that an ARcare team is immediately released to perform an investigation to confirm the classification and scope of the incident. The deployed team will also be responsible for securing the healthcare provider’s system.
The investigation was then finished by the company’s team last month, and their security team concluded that a malicious threat actor had access to ARcare’s network and stayed in the system for about five weeks.
According to their security team, ARcare’s potentially exposed data included the names, social security numbers, driver’s license, date of birth, financial account information, prescription information, medical diagnosis, medical treatment information, and health insurance data.
ARcare revealed that there is still no evidence of exposed data being misused by the threat actors, but they are still not off the hook since the hackers are still in possession of the data.
Last April, the institution determined that personal information connected to individuals was exposed on the 25th and began notifying possible affected individuals and personnel. The HSS was then informed that the data breach incident may have impacted 345,353 persons.
However, the firm assured everyone that they reviewed and updated their policies and procedures regarding data protection and security. ARcare also investigates its security measures to mitigate any risk linked with this incident and to counteract future identical attacks better.
Potentially compromised persons are encouraged by the firm to stay warry against identity theft events by monitoring free credit reports for sketchy activity and detecting mistakes, reviewing account statements, and explaining benefits.
The company elaborated that their clients should report any suspicious activity to their insurance company and financial institution.
