Allegheny Health Network (AHN) has disclosed a cybersecurity incident involving an IT vendor, IntraSystems, LLC. The vendor, which manages certain computer systems for AHN’s Home Medical Equipment and Home Infusion companies, experienced unauthorized access beginning on October 11, 2024. AHN was informed of the breach on November 19, 2024.
The compromised systems contained data of patients who used AHN’s home medical services. An unauthorized user accessed some patient information. Once the breach was discovered, steps were taken to secure the data and stop further unauthorized access. This included taking affected systems offline and disconnecting them from other networks to prevent additional breaches. Law enforcement was notified about the incident.
IntraSystems is notifying affected patients in compliance with HIPAA and state laws. The exposed information may include names, birth dates, addresses, Social Security numbers, financial account details (excluding access codes), health insurance IDs and related information, as well as treatment records such as diagnoses and prescription details. AHN reports no known identity theft or fraud resulting from this incident.
To protect patient identities, AHN has instructed IntraSystems to provide identity protection services at no cost to those affected. Several corrective measures have been implemented to prevent future incidents.
For more information, affected individuals can contact a toll-free number: 888-753-5582 between Monday and Friday from 9 a.m. to 9 p.m., Eastern Time (excluding U.S.-observed holidays).
