USA: Victory Health Partners notifies OCR of data breach
Victory Health Partners ('VCP') notified, on 2 November 2021, the U.S. Department of Health and Human Services ('HHS') Office for Civil Rights ('OCR') of a data security incident affecting 30,000 individuals. In particular, VCP noted that it had become aware of a ransomware event on its computer systems, which resulted in the potential release of personal health information of some of its patients. Specifically, VCP highlighted that the affected personal and protected health information that may have been involved in the incident included names, addresses, social security numbers, dates of birth, and other protected information.
In response to the incident, VCP also highlighted that it had taken steps to, among other things, identify current mailing addresses for the potentially impacted individuals to notify them and offer complimentary credit monitoring and identity protection services.