On March 14, 2024, Cornerstone Healthcare Group Management Services LLC (“Cornerstone Specialty Hospitals”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after discovering that an unauthorized party was able to access information that had been provided to the company. In this notice, Cornerstone explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, Cornerstone began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Cornerstone Healthcare Group Management Services LLC, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Cornerstone Specialty Hospitals data breach. For more information, please see our recent piece on the topic here.
What Caused the Cornerstone Specialty Hospitals Data Breach?
The Cornerstone Specialty Hospitals data breach was only recently announced, and more information is expected in the near future. However, Cornerstone’s filing with the U.S. Department of Health and Human Services Office for Civil Rights provides only very limited information on what led up to the breach. And, it appears as though Cornerstone has not posted a website notice or issued a press release describing the incident in more detail.
Based on the HHS-OCR filing, on March 14, 2024, Cornerstone filed notice of a data breach involving a “hacking / IT incident” of a network server. While Cornerstone was the company that notified HHS-OCR, it is possible that the breach occurred at one of Cornerstone’s vendors. Thus, we cannot say with any certainty that Cornerstone’s systems were hacked. However, this doesn’t change the fact that information that was provided to Cornerstone was subject to unauthorized access.
Regardless of how the breach occurred, after learning that sensitive consumer data was accessible to an unauthorized party, Cornerstone Specialty Hospitals reviewed the compromised files to determine what information was leaked and which consumers were impacted.
Cornerstone Specialty Hospitals notified the HHS-OCR on March 14, 2024. Typically, this is around the time companies send out data breach letters to anyone who was affected. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Cornerstone Healthcare Group Management Services LLC
Cornerstone Healthcare Group Management Services LLC is a healthcare services provider based out of Dallas, Texas. Cornerstone provides long-term acute care and rehabilitation services to medically complex patients who need additional treatment or oversight after leaving the hospital. Cornerstone Specialty Hospitals provides long-term acute care in 15 locations across Arizona, Arkansas, Louisiana, Oklahoma, Texas, and West Virginia. Cornerstone is part of ScionHealth, a national healthcare system based out of Louisville, Kentucky. Cornerstone Specialty Hospitals employs more than 3,000 people and generates approximately $395 million in annual revenue.
