Healthcare Business Associate Data Breach Impacts 320K

Onix Group, a Kennett Square, Pennsylvania-based company that operates commercial real estate and provides management and consulting services, suffered a ransomware attack that resulted in a healthcare data breach.

The breach impacted 319,500 individuals in total. Onix group notified the impacted individuals on behalf of its affiliates, Addiction Recovery Systems, Cadia Healthcare, Physician's Mobile X-Ray, and Onix Hospitality Group.

Onix discovered the incident on March 27 and immediately took action to secure its systems. Further investigation determined that an unauthorized party had accessed its network for seven days in March, corrupting systems and removing files in the process.

The impacted files included names and Social Security numbers, as well as scheduling, billing, and clinical information regarding care at one of the previously mentioned healthcare facilities. The files also contained information that the company maintained for human resources purposes, such as names, Social Security numbers, health plan enrollment information, and direct deposit information.

“Onix takes the privacy and security of the information in its care very seriously and sincerely regrets any inconvenience this incident may cause,” Onix stated. “To help prevent something like this from happening again, Onix strengthened the security of its systems and will continue enhancing its protocols to safeguard the information in its care.”