PracticeSuite Data Breach Investigation
Strauss Borrelli PLLC, a leading data breach law firm, is investigating PracticeSuite, Inc. regarding its recent data breach. The PracticeSuite data breach may have involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT PRACTICESUITE, INC.:
PracticeSuite is a software development company that provides complete practice management tools to medical professionals, including doctors, administrators, and revenue cycle management companies. Specifically, PracticeSuite offers cloud-based medical billing software coupled with practice management, electronic health record, and practice portal tools. Headquartered in Tampa, Florida, PracticeSuite processes over $10 billion in claims for over 92,000 clients annually.2 Founded in Silicon Valley in 2004, PracticeSuite employs over 200 individuals and boasts a 98% customer retention rate.2
WHAT HAPPENED?
On November 18, 2024, PracticeSuite reported to the Attorney General of the Commonwealth of Massachusetts that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed by an unauthorized third party. On or around October 11, 2024, a cybercriminal accessed a data file hosted on a PracticeSuite server. This server contained a back-up record up to March 19, 2024 for one of PracticeSuite’s clients, Texan ENT Specialists, PLLC.1 On October 18, 2024, PracticeSuite confirmed that protected health information on the accessed server was compromised. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Date of birth
- Address, phone number, email address, fax number, etc
- Patient ID or other unique identifiers
- Driver’s license number
- Account number
- Medical information (including radiological tests such as MRIs, x-rays, etc)
- Health insurance information
As a result of the data breach, PracticeSuite has provided notice to impacted individuals. Based on the breach notice sent to Massachusetts residents, PracticeSuite is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letters that PracticeSuite filed with the Attorney General of the Commonwealth of Massachusetts is below.
If you received a breach notification letter from PracticeSuite, Inc.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
