HCF Management nursing homes reports data breach
Learn More
A data breach is reported at HCF Management Inc., affecting multiple long-term care facilities in Erie County. HCF Management operates 31 facilities, including Edinboro Manor, Corry Manor, and Fairview Manor in Erie County, Pennsylvania.
The incident occurred on September 17, 2024, when unauthorized actors gained access to the company's computer systems and exfiltrated documents. After detecting the breach, HCF implemented security measures and engaged a third-party computer forensic firm to conduct an investigation. The exposed information includes:
- Names
- Addresses
- Phone numbers
- Dates of birth
- Social Security numbers
- Medical treatment information
- Health insurance information
The incident potentially affects all 31 facilities managed by HCF Management. The exact number of affected individuals and the nature of the attack is not disclosed.
Update - As of 24th of Janary 2025 the company reports 70,089 affected patients. The RansomHub added HCF Inc. to its leak site with a claim that they had exfiltrated 250 GB of files. Their listing did not specifically mention whether HCF’s information was encrypted as part of the attack. As of 24th of January
At minimum the number of impacted is around 360 people since the three Erie County facilities are each licensed for 121 beds. The company did not nspecify whether employee data was compromised in the breach.
The company has stated that they are not aware of any fraud or identity theft resulting from this breach. They are offering complimentary identity protection and credit monitoring services to individuals whose Social Security numbers were exposed.
