T.J. Martineau Through third party subcontracting was part of the Navvis & Company and SSM Health Care Corporation Data breach. Beware Rhode Island

Through third party subcontracting was part of the Navvis & Company and SSM Health Care Corporation Data breach. have agreed to a $6.5 million settlement to resolve all claims related to a 2023 data breach that affected 2.8 million individuals. Navvis & Company is a population health company that partners with health systems, physician enterprises, & health plans to help them with value-based care. SSM Health is a healthcare provider serving patients in Illinois, Missouri, Oklahoma, and Wisconsin. Between July 12, 2023, and July 25, 2023, a cybercriminal group had access to the network of Navvis & Company, exfiltrated sensitive data, and used ransomware to encrypt files. The stolen data included the protected health information of patients and plan members of SSM Health, Arkansas Health Network, Horizon Blue Cross Blue Shield of New Jersey, RWJBH Corporate Services, Hawai’i Medical Service Association, Triple-S Management Corporation, Allina Health, and Florida Medical Clinic.

The forensic investigation confirmed that approximately 2.8 million individuals had their data exposed or stolen in the incident, including names, dates of birth, Social Security numbers, beneficiary HIC numbers, case identification numbers, health plan information, health record information, medical record numbers, diagnosis/clinical information, medical treatment/procedure information, and health insurance information. Notification letters were mailed to the affected individuals on a rolling basis between September 22, 2023, and June 4, 2024.

At least six lawsuits were filed against Navvis & Company and others in response to the data breach. Since the lawsuits asserted similar claims and were based on the same facts, they were consolidated into a single class action complaint. That complaint was filed on March 11, 2024, in the Circuit Court of St. Louis, Missouri – Doe, et al. v. SSM Health Care Corporation d/b/a SSM Health, et al.