On February 12, 2024, Coleman Professional Services, Inc. (“Coleman Health Services,” “Coleman”) filed a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party accessed several employee email accounts. In this notice, Coleman explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their first names, last names, Social Security numbers, driver’s license numbers, and health information. Upon completing its investigation, Coleman began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Coleman Professional Services, Inc., it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Coleman Health Services data breach. For more information, please see our recent piece on the topic here.

What Caused the Coleman Health Services Data Breach?

The Coleman Health Services data breach was only recently announced, and more information is expected in the near future. However, Coleman’s filing with the Attorney General of Maine provides some important information on what led up to the breach. Coleman also posted a website notice discussing the incident.

According to these sources, on December 14, 2023, Coleman learned that an unauthorized party was able to access several employee email accounts. In response, Coleman launched an investigation to learn more about the incident as well as what, if any, consumer information was subject to unauthorized access as a result.

The Coleman investigation confirmed that the unauthorized party was able to access certain employee email accounts between September 18, 2023 and October 31, 2023. While Coleman could not determine which emails and attachments were viewed, the company was able to determine that certain confidential information was present within the email accounts and possibly accessed without authorization.

After learning that sensitive consumer data was accessible to an unauthorized party, Coleman Health Services reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your first name, last name, Social Security number, driver’s license number, and health information.

On February 12, 2024, Coleman Health Services sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Coleman Professional Services, Inc.

Founded in 1978, Coleman Professional Services, Inc. is a not-for-profit healthcare services provider based out of Kent, Ohio. Coleman provides behavioral health, residential, employment and supportive services to 13 Ohio counties and the surrounding communities. Coleman Health Services employs more than 732 people and generates approximately $52 million in annual revenue.