A big data breach was reported that has impacted many healthcare, senior living and rehabilitation centers in Arizona, Oregon, Nevada, Colorado, Utah,
and Washington, which are managed by organizations that belong to the group Avamere Holdings based in Wilsonville, OR.
From January 19, 2022 to March 17, 2022, an unauthorized person acquired access to a third-party-managed network that was employed by Avamere Health Services, LLC. Avamere Health Services is an Avamere Holdings group of companies’ business associates that offers information technology services. The forensic investigators of the data breach stated that the people responsible for the attack copied files from its systems. The compromised data included the data of workers and patients, such as names, addresses, birth dates, driver’s license or state ID numbers, Social Security numbers, claims details, financial account numbers, prescription drugs data, laboratory results, and medical diagnosis/conditions data.
The precise nature of the cyberattack wasn’t given in the substitute breach notification, however, it looks like a ransomware attack that led to the publishing of the exfiltrated data on the ransomware group’s data leak website. Avamere Health Services mentioned its IT department was employing third-party cybersecurity specialists to examine its current security procedures and security is going to be improved to avoid any recurring attacks.
Avamere Health Services submitted the breach report to the Department of Health and Human Services Office for Civil Rights indicating that 197,730 persons were affected and has currently sent notification letters to those people and has provided free credit monitoring services. Avamere Health Services sent notification letters for the 81 HIPAA business associate organizations.
One organization is Premere Infinity Rehab, LLC, which likewise posted its own substitute breach notice for 16 other companies that serve as a HIPAA business associates. Premiere Infinity Rehab has sent the breach report to the HHS’ Office for Civil Rights indicating that 183,254 persons were affected.
It is presently unknown whether the total of 380,984 people is the finalized breach total. Organizations recognized to have been impacted are listed below.
A-One Home Health Services, LLC
Avamere at Port Townsend
Avamere Gresham Rehabilitation and Specialty Care
Avamere Rehabilitation of Lebanon
Cascadia Healthcare
Rockwood at Hawthorne
Avamere at Albany Avamere at Rio Rancho
Avamere Harmony House of Bend
Avamere Rehabilitation of Newport
Christian Living Communities
Rockwood South Hill
Avamere at Bethany
Avamere at Roswell
Avamere Health Services of Rogue Valley
Avamere Rehabilitation of Oregon City
Columbia Lutheran Home Salem Transitional Care
Avamere at Cascadia Village
Avamere at Sandy
Avamere Heritage Rehabilitation of Tacoma
Avamere Rehabilitation of Richmond Beach
Good Samaritan Society
Signature Coastal, LLC
Avamere at Chestnut Lane
Avamere at Seaside
Avamere Home Health Care, LLC
Avamere Riverpark of Eugene
Goodman Group
Signature Home Health Bend, LLC
Avamere at Englewood Heights
Avamere at Seaside Avamere Living at Berry Park
Avamere St. Francis of Bellingham
Infinity Rehab
Signature Hospice Eugene, LLC
Avamere at Hermiston
Avamere at Sherwood
Avamere Olympic Care of Sequim
Avamere Transitional Care and Rehabilitation-Bellingham
Kin On Health Care Center
Signature Hospice Medford, LLC
Avamere at Hillsboro
Avamere at South Hill
Avamere Rehabilitation at Fiesta Park
Avamere Transitional Care and Rehabilitation-Boise
Laurelhurst Village
Signature Hospice Nampa, LLC
Avamere at Las Vegas
Avamere at St. Helens
Avamere Rehabilitation of Beaverton
Avamere Transitional Care and Rehabilitation-Brighton
Mission Healthcare at Bellevue, JV Signature Hospice Oregon Coast, LLC
Avamere at Lexington
Avamere at the Stratford Avamere Rehabilitation of Cascade Park
Avamere Transitional Care and Rehabilitation-Malley
Mission Healthcare at Renton
Summitview Healthcare Center
Avamere at Moses Lake
Avamere at Three Fountains
Avamere Rehabilitation of Clackamas
Avamere Transitional Care at Sunnyside
Northwest Hospice, LLC
Suzanne Elise Assisted Living Facility
Avamere at Mountain Ridge’
Avamere at Waterford
Avamere Rehabilitation of Coos Bay
Avamere Transitional Care of Puget Sound
NP2U, LLC The Arbor at Avamere Court
Avamere at Newberg
Avamere at Wenatchee
Avamere Rehabilitation of Eugene
Avamere Twin Oaks of Sweethome
Pinecrest Community
The Arbor at Bend
Avamere at Oak Park
Avamere Court at Keizer
Avamere Rehabilitation of Hillsboro
Bend Transitional Care
Prestige Car – The Arbor at Bremerton
Avamere at Pacific Ridge
Avamere Crestview of Portland
Avamere Rehabilitation of Junction City
Bethany at Pacific
Prime Home Health, LLC
The Pearl at Kruse Way
Avamere at Park Place
Avamere Fern Gardens Memory Care
Avamere Rehabilitation of King City
Bethany at Silver Lake
Queen Anne Healthcare
The Stafford