in January, DataBreaches.net noted a report to the Massachusetts Attorney General’s office that involved Comprehensive Health Services (CHS), a business relate providing occupational health services to clients’ employees. The breach was not reported on this site at that time because we anticipated more reports or a press release. That happened this week, but in comparing this week’s notification to the january account to Massachusetts involving anchorperson QEA, LLC, it appeared that the notification to anchor QEA contained details not included in their pressure discharge yesterday concerning steps CHS took following the breach. Specifically, the January notification letter included:� What We are Doing: In addition to taking immediate activity upon learning of the attack, the troupe implemented additional corrective actions as recommended by the forensic review team during its investigation. We have invested in enhanced network security measures, including: 1) purchasing a new suite of endpoint detection and response tools, and installing this software on all servers and endpoints on the network enterprise; 2) replacing our previous threat detection and monitoring surveillance vendor; 3) adding capabilities for extended detection and response to future attempted network intrusions; and 4) conducting network insight testing. Additionally, while the notification template submitted to Massachusetts contains an offer of mitigation services, there is no mention of that in the public press liberate or the notice on CHS’s website. Only those reading the actual notification mightiness go aware of the offer. From the Massachusetts notification: in order to help relieve concerns over possible indistinguishability theft as a result of this incident, and to reconstruct confidence following this incident, we are offering you complimentary identity protection services through <redacted>, a leader in peril moderation and response. These services include 24 months of credit monitoring, dark web monitoring, a $1,000,000 identity fraud loss reimbursement policy, and fully-managed identity theft recovery services. This incident has not yet shown up on HHS’s public breach tool, so this post will eventually be updated with a notation about how many patients may hold been impacted.� For now, here is CHS’s press free issued yesterday: cape CANAVERAL, fla. Feb. 11, 2022 �/PRNewswire/ — On�September 30, 2020, Comprehensive Health Services (“CHS”) detected unusual activity within its digital environment following discovery of fraudulent wire transfers. in response, CHS took immediate steps to secure its digital environment and promptly launched an investigation. In so doing, CHS engaged independent digital forensics and incident reaction experts to determine what happened and to place any information that may have been accessed or acquired without authorization as a result. On� November 3, 2021 , CHS learned that certain personal information may have been impacted in connexion with the incident. CHS then worked diligently to identify address info required to effectuate notification. There is no evidence of the misuse of any information potentially involved in this incident.� However, on�January 20, 2022, and� february 14, 2022, CHS sent notification letters to the individuals whose personal information was potentially involved in this incident for whom CHS had identifiable speech information providing them information about what happened and steps they canful read to protect their personal information. Based on the investigation of the incident, the following personal info may have been involved in the incident: name, date of birth, and / or Social Security number. CHS takes the security of all information within its possession very seriously and is taking steps to prevent a similar event from occurring in the future, including investing in enhanced security measures. CHS has established a toll-free call midpoint to resolve questions about the incident and related concerns. The phone center is available monday through Friday from� 8:00 A.M. to 8:00 P.M. Central Time, monday through friday (excluding holidays) and can be reached at 1-800-741-0381. The certificate of info is our top precedence at CHS, and we are committed to safeguarding data and privacy. We deeply regret any care or inconvenience�that this�matter�may cause. CHS has also posted second-stringer mark to its website providing individuals for whom addresses could not be located with info about the incident. �View original content:https://www.prnewswire.com/news-releases/notice-of-data-security-incident-301481106.html source Comprehensive health Services
