On June 20, 2023, Kannact Inc. filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights (“HHS-OCR”) after determining that a recent data security incident resulted in unauthorized access to confidential consumer information that was in the company’s possession. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security Numbers, dates of birth, addresses, phone numbers, driver's license numbers, and protected health information. After confirming that consumer data was leaked, Kannact began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.
If you received a data breach notification from Kannact, it is essential you understand what is at risk and what you can do about it. Data breaches targeting software companies have been some of the largest of 2023, leaking the information of millions of Americans. These breaches raise unique challenges for victims because they may not know that the company has their information. However, software companies are routinely given confidential information by healthcare providers and other customers, which can find its way onto the Dark Web after a data breach. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Kannact data breach, please see our recent piece on the topic here.
What We Know So Far About the Kannact Breach
News of the Kannact data breach is still fresh; however, what we know at this point comes from the company’s filing with the HHS-OCR. Kannact also posted a notice discussing the breach on its website. According to these sources, on March 13, 2023, Kannact learned that an unauthorized party had gained access to its computer network. In response, Kannact took the necessary steps to secure its IT network and then began working with a third-party data security firm to investigate the incident.
The Kannact investigation confirmed that one or more unauthorized parties were able to access certain files on the company’s network that contained confidential information pertaining to more than 103,000 consumers.
Upon discovering that sensitive consumer data was made available to an unauthorized party, Kannact began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security Number, date of birth, address, phone number, driver's license number, and protected health information.
On June 20, 2023, Kannact sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About Kannact Inc.
Founded in 2012, Kannact Inc. is a software company based out of Albany, Oregon. The company provides solutions and support to employers when creating employee health plans. Kannact relies on fostering human-to-human relationships between employees and their healthcare coaches, who help to ensure employees attend to their health and follow up on treatments and diagnostic testing as necessary. Kannact employs more than 31 people and generates approximately $6.5 million in annual revenue.
