Carespring Healthcare Management reports data breach exposing 77k patients
Learn More
Carespring Healthcare Management, an Ohio-based nursing home operator, is notifying 76,719 individuals about a data breach that compromised sensitive personal and medical information.
The breach dates back to October 2023, with the incident first discovered on October 28, 2023. However, it took around nine months to confirm whether data was exfiltrated from the network, delaying notification efforts until July 2024.
The breach exposed the following types of information:
- Names
- Dates of birth
- Addresses
- Social Security Numbers
- Medical and diagnosis information
- Health insurance information
No details are disclosed about the number of affected individuals.
Carespring began sending written notifications to affected individuals in August 2024. While there is no evidence so far that the stolen information has been used for fraudulent purposes, Carespring urges individuals to monitor their financial accounts for suspicious activity. The company is offering 12 months of free identity monitoring services, including credit monitoring, fraud consultation, and identity theft restoration.