Over 300,000 Individuals Impacted by Vitas Hospice Data Breach

According to the healthcare data breach tracker maintained by the US Department of Health and Human Services (HHS), more than 300,000 individuals are affected by a cybersecurity incident at Vitas Healthcare. Vitas, the largest for-profit hospice chain in the United States, disclosed that the intrustion was detected on 24 November via a dedicated data breach notice website, with the attacker gaining access to some Vitas systems using a compromised vendor account.

The intrusion reportedly allowed access from about 21 September to 27 October, during which personal information such as names, addresses, dates of birth, driver’s licence numbers, SSNs, medical and insurance details, and next of kin contacts were downloaded. The HHS breach tracker shows that the incident has impacted 319,177 individuals, and it remains unclear whether the event was a targeted ransomware attack, as no ransomware group has claimed credit. SecurityWeek notes that healthcare data breaches of this scale are not uncommon, even when attribution remains uncertain.