A significant data breach at ConnectOnCall, a telehealth subsidiary of healthcare SaaS provider Phreesia, has exposed sensitive information of more than 914,000 patients. The breach, occurring between February 16 and May 12, 2024, compromised various personal and medical data.

Exposed Information:
– Patient names and phone numbers
– Medical record numbers
– Dates of birth
– Health conditions and treatment details
– Prescription information
– Select Social Security Numbers

Immediate Response:
– System taken offline upon discovery
– Federal law enforcement notified
– External cybersecurity experts engaged
– Implementation of enhanced security measures
– System restoration in progress within secure environment

Phreesia confirmed that the breach was isolated to ConnectOnCall services and did not affect their main patient intake platform. The company has reported the incident to the U.S. Department of Health and Human Services and is advising affected individuals to monitor for potential identity theft or fraud, although no evidence of data misuse has been detected.

The incident marks another significant healthcare data breach in recent times, joining other major incidents at institutions like Anna Jaques Hospital and UnitedHealth’s Change Healthcare.