On July 31, 2024, Option Care Health, a leading provider in the home and alternate site infusion services industry, experienced a data breach. An unauthorized party briefly accessed an employee's email inbox. This breach was quickly identified and terminated by Option Care Health's security tools.
However, a subsequent investigation revealed that some protected health information (PHI) of certain patients was potentially impacted. The investigation concluded on September 16, 2024, confirming the exposure of sensitive information.
The breach was reported to the California Attorney General's office, and more details can be found in the official disclosure.
In response to the breach, Option Care Health took action by restricting access to the compromised email inbox and resetting its password. The company is also reviewing its internal controls to prevent future incidents.
To support affected individuals, Option Care Health has partnered with Kroll to offer identity monitoring services for a specified period at no cost. Affected individuals can activate these services by visiting Kroll's enrollment page.
If you believe you may have been affected by this data breach, it is important to take proactive measures to protect your information. Here are some steps you can follow: