Aspire Health Alliance Data Breach Affects Over 17,000 People

The September 2023 Security Incident

On September 13, 2023, Aspire Health Alliance detected unusual activities within its digital environment, signaling a potential security threat. The organization responded promptly by securing its network and initiating a thorough investigation with the help of independent cybersecurity experts. This investigation aimed to understand the nature of the incident and determine if sensitive information was compromised.

By February 26, 2024, the investigation concluded that an unauthorized actor had indeed accessed and acquired certain files and data from Aspire Health’s systems. The review of the impacted data revealed that personal and protected health information of 17,490 individuals might have been affected.

Information Exposed

• Social Security Number

Aspire Health Alliance's Response

Following the discovery of the data breach, Aspire Health Alliance took significant steps to address the incident and prevent future occurrences. The organization enhanced its security measures to fortify its digital environment. Moreover, Aspire Health reported the incident to the Federal Bureau of Investigation and is actively cooperating with their investigation.

Understanding the potential risks posed by the exposure of Social Security numbers, Aspire Health has offered complimentary credit monitoring and identity protection services to the affected individuals. These services are designed to help detect misuse of the information and assist in recovery if identity theft occurs. Additionally, a dedicated toll-free call center has been established to answer any questions and provide support to those impacted.

It wasn’t until April 26, 2024, that the company disclosed the breach to the Maine Attorney General’s Office.

Steps to Take if You Are Affected

If you believe your information was compromised in this breach, it is crucial to stay vigilant and proactive in monitoring your financial accounts for any unusual activity. Here are several steps you can take:

1. Enroll in Credit Monitoring: Take advantage of the free credit monitoring services provided by Aspire Health. This service can alert you to changes in your credit report, which might indicate potential fraud.
2. Place a Fraud Alert: Contact one of the major credit bureaus (Equifax, Experian, or TransUnion) to request a fraud alert on your credit report. This makes it harder for identity thieves to open accounts in your name.
3. Review Your Credit Reports: Obtain a free copy of your credit report from each credit bureau annually via AnnualCreditReport.com. Review these reports for discrepancies or unauthorized accounts.
4. Consider a Security Freeze: You might want to place a security freeze on your credit reports, which prevents creditors from accessing your credit report entirely, blocking new credit applications.
5. Report Suspicious Activities: If you notice any suspicious activity, immediately report it to the relevant financial institution and the Federal Trade Commission at IdentityTheft.gov.

About Aspire Health Alliance

Aspire Health Alliance, founded in 1926, is a nonprofit headquartered in Massachusetts. Its 1,900 healthcare workers integrate mental health care into overall health strategies, emphasizing the importance of emotional well-being.

For detailed information regarding the breach and the notice to consumers, please refer to the official disclosure on the Maine Attorney General's website.