Strauss Borrelli PLLC, a leading data breach law firm, is investigating VPS of MI, PLLC (“VPS”) regarding its recent data breach. The VPS data breach may have involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT VPS OF MI, PLLC:
VPS is a group of board-certified healthcare professionals based in Michigan. Today, VPS provides a variety of mobile healthcare services to patients in their homes, including evaluation of medical history, physical examinations, treatment, medication/therapy management, case management services, data reporting, mobile lab and portable diagnostics, transitional care, medical equipment management, assisted living and nursing home consultations, and more.3 Additionally, VPS works with a wide range of health care organizations and has partnered with many agencies such as hospitals, physician offices, and home healthcare groups.4 Headquartered in Farmington Hills, Michigan, VPS has two additional locations in Michigan.
WHAT HAPPENED?
Recently, VPS reported to the Attorney General of the Commonwealth of Massachusetts that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. According to the breach notice, on June 4, 2024, VPS detected suspicious activity within its computer network.1 As a result, VPS launched an investigation to determine the nature of the incident.
Through its investigation, VPS determined that its server had been infected with malware, which prevented access to certain files on its server.1 Additionally, VPS confirmed that sensitive personal information in its systems may have been viewed and obtained by an unauthorized third party during the incident. As a result, VPS began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Driver’s license number
- Medical information (e.g., medical history, mental or physical condition or diagnosis, medical treatment information, disability information, prescription information, medical record number)
- Health insurance information (e.g., health insurance policy number, subscriber number, health insurance application and claims history, appeals records, health insurance group or plan number)
On November 15, 2024, VPS began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Massachusetts residents, VPS is providing affected individuals with a list of the specific types of sensitive information impacted and 12 months of credit monitoring services. A link to the form breach notification letters that VPS filed with the Attorney General of the Commonwealth of Massachusetts is below.
If you received a breach notification letter from VPS of MI, PLLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
