On October 19, 2023, Continuum Health Alliance, LLC detected suspicious activity within its network infrastructure. The immediate response involved securing the systems and launching a comprehensive investigation with the help of third-party cybersecurity experts. It was discovered that an unauthorized actor had accessed certain systems within Continuum’s network between October 18 and October 19, 2023. This breach led to the unauthorized access and acquisition of specific files.
The investigation, completed on March 8, 2024, revealed that the cybercriminals had potentially accessed a variety of sensitive and personal information. The breach was significant due to the nature of the data involved, which included highly sensitive medical and personal details.
The following types of consumer information were potentially compromised:
Upon discovering the breach, Continuum Health Alliance acted swiftly to mitigate the impact by enhancing their security measures and collaborating with law enforcement. The company has since been working on implementing additional safeguards and providing training to its employees to prevent future incidents. Moreover, Continuum has offered credit monitoring services through TransUnion for 12 months at no cost to individuals whose Social Security numbers were affected. They have also provided detailed guidance on how to protect oneself from identity theft and fraud, including how to place a fraud alert and security freeze on credit files.
If you believe your information may have been compromised in this breach, it is crucial to act promptly to protect your identity:
For more detailed information on how to protect your personal information, visit the Federal Trade Commission’s identity theft website.
Continuum Health Alliance is part of the Mount Sinai Health System, an integrated health care system providing distinguished care, transformative research, and biomedical education. With a network that includes seven hospital campuses and numerous ambulatory sites, they offer a wide range of inpatient and outpatient services, from community-based facilities to tertiary and quaternary care.
For further details on the data breach and the official notice to consumers, please refer to the disclosures on the Maine Attorney General's website and the Texas Attorney General's website.