Consumer Privacy & Data Breaches

January 6, 2023 – Retreat Behavioral Health filed notice of a data breach on December 30, 2022 with the Vermont Attorney General after determining that patients’ information was leaked in a ransomware attack. Information that was accessed included protected health information. According to the filing, an unauthorized party gained access to patient information, including Social Security numbers and admission information. After confirming that there was a data

January 5, 2023 – Metropolitan Area EMS Authority, dba Medstar Mobile Healthcare, filed notice of a data breach on December 19, 2022 with the U.S. Department of Health and Human Services for Civil Rights after determining that the information of 612,000 patients was leaked after being hacked. Information that was accessed included protected health information. After confirming that there was a data leak, Medstar sent out notification

January 5, 2023 – Bay Bridge Administrators, LLC (“BBA”) filed notice of a data breach with the Massachusetts Attorney General on December 29, 2022, after sensitive information was exposed to unauthorized parties on its computer network. According to the filing, the information that was accessed included consumers’ first and last names and Social Security numbers. Once there was confirmation of the data breach, BBA sent notification

December 30, 2022 – After a ransomware attack exposed sensitive patient information in their possession, Monarch filed notice of a data breach with the Massachusetts Attorney General and the U.S. Department of Health and Human Services Office for Civil Rights on December 16, 2022. According to the filing, an unauthorized party gained access to patient information such as full names, Social Security numbers, and protected health

December 30, 2022 – After a ransomware attack that exposed sensitive consumer information in their possession, FoundCare, Inc. filed notice of a data breach with the U.S. Department of Health and Human Services Office for Civil Rights on December 16, 2022. According to the filing, an unauthorized party gained access to patient information through employee email accounts. The information that was accessed was patients’ full names, dates

December 30, 2022 – After a “security incident” involving sensitive student information being compromised, Cincinnati State Technical Community College filed notice of a data breach with the Montana Attorney General on December 23, 2022.

According to the filing, an unauthorized party gained access to student information like full names and Social Security numbers, dates of birth, addresses, driver’s license of state ID numbers, financial account information,

December 28, 2022 – After a ransomware attack that exposed sensitive consumer information in their possession, IBW Financial Corporation filed notice of a data breach with the Montana Attorney General’s office on December 23, 2022. According to the filing, an unauthorized party gained access to consumer information such as full names, dates of birth, driver’s license or state identification numbers, addresses, Social Security numbers, financial account

December 24, 2022 – Hartnell Community College District filed a notice of a data breach with the Attorney General of California on December 5, 2022 after learning that an unauthorized party could access confidential student information stored in its computer network.

According to the filing, an unauthorized party gained access to sensitive student information like first and last names, dates of birth, Social Security numbers, student

December 23, 2022 – BetMGM, LLC filed a notice of a data breach with the Massachusetts Office of Consumer Affairs and Business Regulations of the Massachusetts Attorney General on December 20, 2022 after learning that an unauthorized party could access confidential consumer information stored in its computer network.

According to the filing, an unauthorized party gained access to sensitive consumer information like consumer names and Social Security

December 23, 2022 – Ethos Technologies, Inc. filed a notice of a data breach with the Montana Office of Consumer Protection, a division of the Attorney General of Montana’s office, on December 21, 2022 after learning that an unauthorized party could access consumer information stored in its computer network.

According to the filing, an unauthorized party gained access to consumers’ Social Security numbers. Once it was

December 23, 2022 – W.W. Wallwork, Inc. filed a notice of a data breach with the Montana Office of Consumer Protection, on December 20, 2022 after learning that an unauthorized party could access confidential consumer information stored in its computer network.

According to the filing, an unauthorized party gained access to sensitive consumer information like consumer names, addresses, dates of birth, Social Security numbers, driver’s license

December 22, 2022 – After learning that an unauthorized party could access confidential student information stored in its computer network, P2 Energy Solutions filed notice of a data breach with the Maine Attorney General on December 19, 2022.

According to the filing, an unauthorized party gained access to sensitive consumer information like names and Social Security numbers. Once it was confirmed that there was a data

December 22, 2022 – After learning that an unauthorized party could access confidential student information stored in its computer network, Order Express, Inc. filed notice of a data breach with the California Attorney General on December 15, 2022.

According to the filing, an unauthorized party gained access to sensitive consumer information like names and Social Security numbers. Once it was confirmed that there was a data

December 21, 2022 – After learning that an unauthorized party could access confidential student information stored in its computer network, Hope College filed notice of a data breach with the Attorney General of Montana on December 15, 2022.

According to the filing, an unauthorized party gained access to sensitive student information like first and last names, dates of birth, Social Security numbers, student ID numbers, and

December 21, 2022 – After a ransomware attack exposed sensitive consumer information in their possession, Louise W. Eggleston Center, Inc. (“Eggleston”) filed notice of a data breach with the Maine Attorney General’s office on December 16, 2022. According to the filing, an unauthorized party gained access to consumer information such as full names, driver’s license numbers, non-driver ID numbers, Social Security numbers, financial account numbers and