On Jan. 10, 2023, the Supreme Court of the State of New York, County of Kings, granted preliminary approval of a settlement agreement for a class-action lawsuit against AssistCare related to a January 2021 ransomware attack.[1] AssistCare is a HIPAA covered entity that provides home health services. The breach reportedly affected 92,283 individuals.[2]
The ransomware attack resulted in access to and exfiltration of personal data.[3] The protected health information that was affected included names; addresses; email addresses; phone numbers; demographic information; Social Security numbers; dates of birth; financial information, such as bank account numbers; Medicaid numbers; and medical information, such as dates of service and vaccination records.