Mindbloom patient data exposed in electronic medical records system breach
The electronic medical records system of mental health care provider Mindbloom was breached after a person working for an external contractor fell victim to phishing and had their credentials stolen. The attacker downloaded medical records for some patients and a spreadsheet containing names, contact details, health insurance information, and other data. An investigation into potential legal action over the data breach followed.
Key facts
- Affected organization
- Mindbloom
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Medical records, names, contact details, and health insurance information of some patients
- Cause / method
- Credentials stolen through phishing targeting a person working for an external contractor were used to access the electronic medical records system
- Location
- United States
If your data was exposed
Exposed dataNameHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The disclosure of patient records through stolen credentials belonging to a person working for an external contractor and an investigation into potential legal action were reported.
- A further disclosure revealed a health records breach at Mindbloom Provider Group.
5 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.