A malicious insider was the cause for the PII exposure of over 37,000 patients of the Premier Patient Healthcare network. The incident that took place in June of 2020 (discovered in April 2021) is now under investigation by the organization.
According to a report filed to the Maine Attorney General’s office, a recently terminated executive retained their credentials and used them to access and obtain a file containing personal health information (PHI) for over 37,000 individuals. Premier Patient Healthcare described the incident as “insider wrongdoing, loss or theft of device or media,” and stated that the compromised information includes name, age, sex, race, country, and other medical insurance information.
While the breach is being investigated, the organization has yet to file an official report to HIPAA. More details of the incident are expected to follow.