On April 28, 2023, NextGen Healthcare, Inc. (“NextGen”) filed a notice of data breach with the Attorney General of Montana after learning that a recent data security incident impacting the company’s computer network resulted in confidential consumer information being made accessible to an unauthorized party. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, Social Security numbers and addresses. After confirming that consumer data was leaked, NextGen began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you received a data breach notification, it is important that you take the letter seriously, even if you’ve never heard of the company. As we’ve discussed in prior posts, third-party data breaches are becoming increasingly common. A third-party data breach involves a breach at a company that did not receive the breached data directly from the consumer. Instead, the company typically receives the information in relation to services it provides for another company the consumer is familiar with. For example, NextGen provides electronic health records and practice management solutions to doctors and medical professionals. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the NextGen Healthcare data breach, reach out to a data breach lawyer for immediate assistance.

What We Know So Far About the NextGen Healthcare Breach

News of the NextGen Healthcare data breach is still fresh; however, what we know at this point comes from the company’s filing with the Attorney General of Montana. According to this source, on March 30, 2023, NextGen was made aware of suspicious activity with its computer system. In response, NextGen secured its systems and then began working with third-party cybersecurity professionals to investigate the incident in hopes of determining whether any consumer data was leaked as a result.

The NextGen investigation confirmed that an unauthorized party was able to access portions of the company’s computer system between March 29, 2023 and April 14, 2023. It was later determined that some of the files that were accessible to the unauthorized party contained confidential consumer information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, NextGen Healthcare began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, Social Security number and address.

On April 28, 2023, NextGen Healthcare sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About NextGen Healthcare, Inc.

Founded in 1974, NextGen Healthcare, Inc. is a software & services company based in Atlanta, Georgia. The company provides software and related support to ambulatory medical providers, including practice management, revenue cycle management, patient experience, value-based care, analytics & reporting, and data platforms. NextGen Healthcare employs more than 2,800 people and generates approximately $625 million in annual revenue.