OnePoint Patient Care breach affects 1.7 million people

OnePoint Patient Care (OPPC), a major hospice-dedicated pharmacy, has disclosed that hackers may have obtained medical records, Social Security numbers, and other personal data of 1,741,152 individuals.

OnePoint detected the data breach on August 8th, 2024, and later learned that unauthorized hackers “acquired some information from our network between,” according to a filing with the Office of the Maine Attorney General. The disclosed number of affected individuals includes 99 Maine residents.

The data breach affects very sensitive personal information. The company has determined that some patients’ names, addresses, residence information, medical record numbers, diagnoses, Social Security numbers, and prescription information were involved.

OPPC doesn’t have any indication that user information has been misused for committing fraud or identity theft.

“While we are uncertain that your personal information was obtained, out of an abundance of caution, are notifying you of that potential,” the company said in a letter to affected users.

OPPC disclosed the incident publicly on October 14th, 2024, saying that it had no impact on its operations. Previously, it was reported that the incident impacted around 800,000 people.

The ransomware gang INC Ransom claimed the breach on September 12th, according to the listing on its victim site on the dark web. The gang allegedly leaked the obtained data in response to not paying the ransom.

OnePoint Patient Care data breach impacted 795916 individuals https://t.co/ALNNcs4Ppt #BreakingNews pic.twitter.com/eYZvSGbNMW

undefined Eric Vanderburg (@evanderburg) October 25, 2024

OPPC is offering affected individuals free identity protection and credit monitoring services for one year and recommends monitoring credit reports, account statements, and benefit statements.

OnePoint Patient Care is one of the nation’s largest providers of dedicated hospice pharmacy and pharmacy benefits management services, serving hundreds of hospice providers. OPPC fills prescriptions, creates custom compounds and formularies, provides home deliveries, and manages pharmacy benefits for over 40,000 patients per day.