HIPAA Journal reports:
A settlement that resolves claims related to a 2022 security incident and data breach at ArCare has been granted preliminary approval by a District Court Judge. ArCare is a non-profit, federally qualified community health center that provides primary care, behavioral health services, pharmacies, and community outreach programs across Arkansas, Kentucky, and Mississippi.
The Augusta, Arkansas-based healthcare provider first identified unauthorized access to its computer network on February 24, 2022, which caused temporary disruption to services. The forensic investigation determined that an unauthorized third party had access to its network between January 18 and February 24, 2022, and potentially accessed the personal and protected health information of approximately 345,000 individuals. Data compromised in the incident included names, dates of birth, Social Security numbers, driver’s license numbers, financial account information, medical information, and health insurance information.
Read more at HIPAA Journal.
