Medical Data Breach: ConnectOnCall Hack - What You Need To Know

Data Breach at ConnectOnCall Impacts Nearly One Million Individuals

ConnectOnCall is notifying approximately 914,138 individuals following a data security incident that occurred in May. The breach resulted in the compromise of personal and health-related data.

ConnectOnCall, a subsidiary of healthcare technology firm Phreesia, delivers a digital answering service to healthcare professionals. This service manages patient communications outside of regular business hours.

Details of the Compromised Information

The data breach impacted information exchanged between patients and the medical practices utilizing ConnectOnCall’s services. This included sensitive details such as patient names, phone numbers, and dates of birth.

Furthermore, information pertaining to patients’ health conditions, ongoing treatments, and prescribed medications was also exposed. The breach also involved the unauthorized access of some Social Security numbers.

Reporting and Scale of the Incident

While Phreesia initially did not specify the number of affected individuals, they were obligated to report the incident to the U.S. Department of Health and Human Services. The report indicated that 914,138 individuals are being notified of the data compromise.

According to current data breach statistics compiled by government sources, this incident at ConnectOnCall represents the 14th largest healthcare-related breach recorded in 2024 to date.

Impact and Ongoing Concerns

• Patient Information at Risk: The compromised data could potentially be used for identity theft or fraud.
• Healthcare Sector Vulnerability: This breach highlights the ongoing cybersecurity challenges faced by healthcare providers.
• Regulatory Scrutiny: Phreesia faces potential regulatory scrutiny regarding its data security practices.