Nearly 1,000,000 ConnectOnCall customers might have had information stolen by hackers

Healthcare software program ConnectOnCall hit with a knowledge breach
Over 900,000 sufferers information was accessed over three months
This leaves sufferers vulnerable to identification theft

Software program agency Phreesia has notified 914,138 people whose private and well being info was uncovered by a knowledge breach in Could 2023 after utilizing its ConnectOnCall software program, which supplies an after hours name service between sufferers and medical doctors.

An investigation has revealed an unknown third social gathering had access to ConnectOnCall information between February 16 and Could 12 20203, that means delicate provider-patient communications have been compromised – together with medical data, prescription info, full names, and telephone numbers, with a ‘small quantity’ of social safety numbers additionally uncovered.

The incident has taken ConnectOnCall companies offline till the service might be totally assessed and restored, and Phreesia is partaking with legislation enforcement to determine the potential influence.

The dangers for sufferers

ConnectOnCall has supplied identification and credit score monitoring companies, however solely to the shoppers who’ve had social safety numbers uncovered For these not included, the best identity theft protection could be of some assist.

Though there’s no proof thus far of malicious exercise in reference to the breach, unknown actors accessing well being information at all times poses important threat.

“The ConnectOnCall service stays offline, and we’re working diligently to evaluate the potential influence and restore the service,” the agency’s assertion mentioned.

“Whereas ConnectOnCall shouldn’t be conscious of any misuse of private info or hurt to sufferers because of this incident, probably impacted people are inspired to stay vigilant and report any suspected identification theft or fraud to your well being plan or insurer, or monetary establishment.”

The information is the newest in a sequence of healthcare breaches in 2024, with cybercriminals concentrating on the trade due to the delicate nature of the information saved, and the crucial nature of the service supplied.