On May 5, 2023, Asian Health Services (“AHS”) filed a notice of data breach with the California Attorney General’s office after learning that an unauthorized actor was able to access confidential patient information following a compromised employee email account. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, phone numbers, medical record numbers and other protected health information. After confirming that consumer data was leaked, AHS began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.
As a patient, you trust your healthcare providers. However, as we’ve discussed in previous posts, hospitals and large practice groups have become one of hackers’ favorite targets due to the wealth of confidential patient information they organizations possess. If you received a data breach notification from Asian Health Services, it is essential you understand what is at risk and what you can do about it. Speaking to a data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Asian Health Services data breach.
What We Know So Far About the Asian Health Services Breach
News of the Asian Health Services data breach is still fresh; however, what we know at this point comes from the company’s filing with the California Attorney General’s office. According to this source, on February 13, 2023, AHS detected unusual activity within a company email account. In response, AHS took the necessary steps to secure the affected email account and then launched an investigation with the assistance of third-party data security specialists.
The AHS investigation confirmed that an unauthorized party was able to gain access to one employee email account between the dates of February 7, 2023 and February 13, 2023. Subsequently, on April 5, 2023, AHS learned that some of the files that were accessible to the unauthorized party contained confidential patient information.
Upon discovering that sensitive consumer data was made available to an unauthorized party, Asian Health Services began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, phone number, medical record number and other protected health information.
On May 5, 2023, Asian Health Services sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About Asian Health Services
Founded in 1974, Asian Health Services is a healthcare provider based in San Leandro, California. The organization offers health care, social services, and advocacy services for all individuals regardless of income, insurance, immigration status, language, or culture. AHS operates about 13 clinics in San Leandro and Oakland. Asian Health Services employs more than 325 people and generates approximately $59 million in annual revenue.
