Kootenai Health Data Breach Affects 464,088 People: sensitive personal and medical information exposed

On August 1, 2024, Kootenai Health discovered a significant data breach that impacted the personal information of approximately 464,088 individuals across the United States. This breach has raised concerns due to the sensitive nature of the data involved and the potential implications for those affected.

The breach was first detected on March 2, 2024, when Kootenai Health noticed unusual activity that disrupted access to certain IT systems. Following this, the company engaged cybersecurity experts to investigate the incident. The investigation revealed that an unauthorized actor may have accessed data from Kootenai Health's network on or around February 22, 2024. The comprehensive review of the impacted data was completed by August 1, 2024.

The types of consumer information exposed in this breach include:

• Name
• Date of birth
• Social Security number
• Driver’s license or government-issued identification number
• Medical record number
• Medical treatment and condition information
• Medical diagnoses
• Medication information
• Health insurance information

The breach affected 2,303 individuals in Texas and 83 in Maine, among others. The breach was reported to the Attorney General's offices in several states, including Maine, Texas, Massachusetts, and California.

Kootenai Health's Response

In response to the breach, Kootenai Health took immediate steps to secure its digital environment and prevent further unauthorized access. The company implemented additional security measures and notified the Federal Bureau of Investigation to aid in holding the responsible parties accountable. Kootenai Health is also offering affected individuals complimentary credit monitoring and identity theft protection services through IDX, A Zero Fox Company. These services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

Steps for Affected Individuals

If you have been affected by this data breach, it is crucial to take proactive steps to protect your personal information. Here are some recommended actions:

1. Enroll in Credit Monitoring Services: Take advantage of the complimentary credit monitoring and identity theft protection services offered by Kootenai Health through IDX. This can help detect any unauthorized use of your information.
2. Review Account Statements: Regularly check your bank and credit card statements for any suspicious activity. Promptly report any discrepancies to your financial institution.
3. Obtain Your Credit Report: You are entitled to a free credit report from each of the three major credit reporting agencies once every 12 months. Visit AnnualCreditReport.com to request your reports.
4. Consider a Fraud Alert or Security Freeze: Place a fraud alert on your credit report to warn creditors of potential fraudulent activity. Alternatively, you can request a security freeze to prevent new credit accounts from being opened in your name without your consent.
5. Stay Informed: Keep an eye on communications from Kootenai Health and other relevant authorities for updates on the breach and additional steps you may need to take.