Blossom Health Notifies Patients After Phishing Attack Exposes EHR Data

What the notice says

Blossom BH Opco Inc. notified affected individuals of an incident involving unauthorized access to patient information held within its electronic health records software. The notice as filed states the activity occurred .

According to Blossom BH Opco Inc., the access followed , which allowed the unauthorized actor to reach the EHR system before being detected and removed. Blossom BH Opco Inc. states that the information viewed , and specifies that .

In response, Blossom BH Opco Inc. says it . The organization is offering recipients credit monitoring services and has set an enrollment window described in the notice as filed.

What the notice leaves open

The version of the notice as filed does not state a total number of individuals affected nationwide, listing only a placeholder figure for Rhode Island residents. It also does not describe how long the unauthorized actor retained access before removal, nor does it identify the vendor or nature of the EHR software beyond its name. Blossom BH Opco Inc. states there is at the time of the notice.