Arlington, Va.-based VHC Health has been affected by a data breach involving one of its vendors, Xsolis.
Xsolis, a vendor that provides case and utilization management services to healthcare organizations, became aware Jan. 22 of unauthorized activity affecting a limited portion of its environment following a targeted phishing attack Jan. 20.
According to a notice posted by Xsolis, the company immediately contained the activity and launched an investigation with assistance from external cybersecurity experts. The investigation determined that an unauthorized actor acquired certain files containing information that may have included names, addresses, dates of birth, health insurance information, Social Security numbers and medical treatment information, depending on the individual.
Xsolis said it is not aware of any actual or attempted misuse of information related to the incident.
A spokesperson for VHC Health told ARLnow that the incident was disclosed to the hospital April 23 and that the attack “may have exposed information related to some VHC Health patients.”
VHC Health mailed notices to affected patients June 5.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
