Security News > 2024 > July > City of Philadelphia says over 35,000 hit in May 2023 breach
The City of Philadelphia revealed that a May 2024 disclosed in October impacted more than 35,000 individuals' personal and protected health information.
Demographic information, such as name, address, date of birth, social security number, and other contact information; medical information, such as diagnosis and other treatment-related information; and limited financial information, such as claims information.
The city says the data breach affected 35,881 individuals in a filing with the Office of Maine's Attorney General.
The City also mailed data breach notifications on May 16 to those whose protected health information was exposed in the breach.
"In an abundance of caution, we conducted a thorough and in-depth review to determine what information was potentially accessible and to whom such information relates," breach notification letters sent to affected people read. "Once complete, we also worked to validate the results and locate missing address information for those potentially affected. We recently completed this process, and then worked as quickly as possible to provide notice."
The City's Department of Behavioral Health and Intellectual Disability Services also disclosed a HIPAA breach four years ago, in June 2020, after the personal health information of individuals it served was compromised in a phishing attack.