CCM Health recently confirmed that an unauthorized third party gained access to highly sensitive personal data stored on its networks. CCM Health, located in Montevideo, Minnesota, provides health services through public hospitals and healthcare facilities, which requires access to certain sensitive personal and/or health information. CCM Health recently became aware of unusual activity in its digital environment. A forensic investigation ensued, which determined that on April 3, 2023 and April 10, 2023 highly sensitive personal information was accessed and removed by an unauthorized third-party from CCM Health’s networks. The highly sensitive personal information exfiltrated from CCM Health’s systems includes Full Names and Dates of Birth, Social Security Numbers, Medical Information and Health Insurance Information. The Medical Information involved may include medical record numbers, patient account numbers, prescription information, healthcare provider’s name, medical diagnosis, diagnosis code, treatment type, treatment location, treatment date, admission date, discharge date, and/or lab results.
Recognizing the deficiency in its cybersecurity and expressing its regrets that the data breach occurred, CCM Health has subsequently offered affected individuals whose sensitive personal information was involved, twelve (12) months of single bureau credit monitoring.
What should you do if you received a data breach notice letter from CCM Health?
If you would like to have a free, confidential consultation with an attorney to learn more about your rights and potential legal remedies in responding to the recent CCM Health data breach, please contact Hellmuth & Johnson attorney Nathan Prosser at (952) 746-2124, or email at [email protected].
