4.2M Individuals Impacted by Healthcare Data Breach at Independent Living Systems

Miami, Florida-based Independent Living Systems (ILS) disclosed a healthcare data breach that impacted more than 4 million individuals, making it the largest reported healthcare data breach of 2023 to date.

ILS is a business associate of Florida Community Care and HPMP of Florida. ILS provides “clinical and third-party administrative services to managed care organizations and providers that serve high-cost, complex member populations in the Medicare, Medicaid and Dual-Eligible Market,” its website states.

ILS discovered that some of its systems were inaccessible on July 5, 2022 and immediately engaged cybersecurity specialists to respond to the incident. An unauthorized actor was able to access and acquire some information.

Although the breach occurred between June 30 and July 5, 2022, ILS did not determine the scope of the breach until months later. ILS said it posted a preliminary breach notice on its website in September 2022 but did not complete its review of the affected information until January 2023.

The data involved in the breach varied by individual but may have included names, addresses, Social Security numbers, financial account information, medical record numbers, Medicare or Medicaid information, mental and physical treatment information, food delivery information, dates of birth, driver’s license numbers, diagnosis codes, admission and discharge dates, billing information, health insurance information, and prescription information.

ILS takes this incident and the security of information entrusted to it very seriously,” the breach notice stated.

“In response to this incident, ILS promptly took steps to mitigate any risk of compromise to individuals' information and better prevent a similar event from reoccurring. ILS remains committed to safeguarding the privacy and security of information in its possession.”