Advanced Medical Group Data Breach Investigation

Recently, Advanced Medical Group announced that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, on February 22, 2024, Advanced Medical Group identified suspicious activity within its email environment. As a result, Advanced Medical Group launched an investigation to determine the nature of the incident.

Through its investigation, Advanced Medical Group learned that sensitive personal information in its systems may have been compromised by an unauthorized third-party using two employee email accounts. As a result, Advanced Medical Group began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. The exact type of personal information potentially exposed has not been made publicly available by Advanced Medical Group. However, on August 19, 2024, Advanced Medical Group filed official notice of the data breach with the U.S. Department of Health and Human Services’ Office for Civil Rights. Though much information is still not known about the Advanced Medical Group breach, the U.S. Department of Health and Human Services’ reporting guidelines require entities to report data breaches when they involve protected health information. Therefore, it is likely that the Advanced Medical Group breach included unauthorized access to protected health information. Additionally, according to state reporting guidelines, “personal information” can include the following types of information:

• Name
• Social Security number
• Driver’s license or state identification card number
• Financial account number, or credit or debit card number, alone or in combination with any required security code, access code or password that would permit access to a consumer’s financial account

On August 7, 2024, Advanced Medical Group posted a notice of the incident on its website. Additionally, Advanced Medical Group plans to mail data breach notification letters to impacted individuals. Based on the breach notice on its website, Advanced Medical Group will be providing affected individuals with a list of the specific type of sensitive information impacted and 12 months of complimentary credit monitoring services. A link to the form breach notification letter that Advanced Medical Group posted on its website below.