A hacking incident has exposed the data of 153,174 patients of Amazon One Medical’s senior health unit.
The company reported the number to HHS’ Office for Civil Rights in July, with the agency posting the figure in August.
One Medical said it learned June 13 that an unauthorized party had accessed a third-party file storage system holding archived records from Iora Health, a primary care company it acquired in 2021 that now operates as One Medical Senior Health. The company deactivated the system, revoked access and launched an investigation, saying compromised files were limited to legacy Iora Health and One Medical Seniors patients.
A digital extortion group known as ShinyHunters claimed responsibility for the breach, alleging it stole 8.8 terabytes of data. Multiple patients have since filed proposed class-action lawsuits against 1Life Healthcare, One Medical’s parent company, in federal court in California, alleging inadequate data protection practices.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
