Anna Jaques Hospital Data Breach Affects 316,342

Anna Jaques Hospital, a not-for-profit community hospital based in Newburyport, Massachusetts, recently experienced a significant data breach that has impacted hundreds of thousands of individuals.

The breach was discovered on December 22, 2024, and has exposed sensitive personal and medical information of 316,342 individuals across the United States, including 637 residents of Maine.

The compromised information includes a wide range of sensitive data, such as:

• Names
• Medical information
• Health insurance information
• Social Security numbers
• Driver’s license numbers
• Financial information
• Other personal or health-related data

The breach appears to have been caused by unauthorized access to the hospital's systems, although specific details about how the breach occurred or who may be responsible have not been disclosed. The scale and sensitivity of the exposed data make this incident particularly concerning, as it involves critical personal and financial details that could be exploited for identity theft or fraud.

The hospital reported the breach to the Maine Attorney General’s office on December 7, 2024. Notifications to affected individuals began on December 5, 2024, through written communication.

Anna Jaques Hospital's response

In response to the breach, Anna Jaques Hospital has taken several steps to address the situation and protect affected individuals. The hospital has reset passwords and updated its information security policies to prevent similar incidents in the future. Additionally, the hospital has committed to continually evaluating and modifying its practices and internal controls to enhance the security and privacy of personal information.

To support affected individuals, Anna Jaques Hospital is offering complimentary 24-month memberships to Experian IdentityWorks Credit 3B. This service provides credit monitoring, identity theft insurance, and identity restoration support. Affected individuals can enroll in this service to monitor their credit and protect against potential misuse of their personal information.

Steps to take if you are affected by the data breach

If you have been notified that your information was part of this breach, it is essential to take immediate steps to protect yourself. Here are some actions you should consider:

1. Enroll in the complimentary credit monitoring service: Take advantage of the 24-month Experian IdentityWorks Credit 3B membership offered by Anna Jaques Hospital. This service can help detect potential misuse of your information and provide support if identity theft occurs.
2. Monitor your financial accounts and credit reports: Regularly review your bank statements, credit card statements, and credit reports for any unauthorized transactions or accounts. You can obtain a free annual credit report from each of the three major credit bureaus at AnnualCreditReport.com.
3. Place a fraud alert on your credit file: Contact one of the three major credit bureaus—Equifax, Experian, or TransUnion—to request a fraud alert. This will notify creditors to take extra steps to verify your identity before opening new accounts in your name.
4. Consider placing a security freeze on your credit file: A security freeze prevents creditors from accessing your credit report without your permission, making it more difficult for identity thieves to open accounts in your name. You can request a freeze through the credit bureaus' websites: Equifax, Experian, and TransUnion.
5. Be vigilant for phishing attempts: Scammers may attempt to exploit the situation by sending fraudulent emails or making phone calls pretending to be from Anna Jaques Hospital or related organizations. Do not provide personal information unless you are certain of the request's legitimacy.
6. Report suspicious activity: If you notice any unauthorized transactions or suspect identity theft, contact your financial institution immediately. You should also file a report with the Federal Trade Commission (FTC) at IdentityTheft.gov and your local law enforcement agency.