HomecareGPS

Summary

HomecareGPS reported a hacking/IT incident that led to unauthorized access to protected health information affecting over 31,000 individuals. The company, based in Worcester, Massachusetts, employs more than 25 people and has annual revenue of about $5 million, and it sent breach notification letters to all impacted individuals after confirming the data exposure.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On June 2, 2023, Elgon Information Systems, doing business as HomecareGPS, filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after learning that confidential consumer information had been subject to unauthorized access. The company confirmed that consumer data had been leaked and subsequently began sending out data breach notification letters to all individuals who were impacted by the incident. The filing indicated that the breach likely resulted from a hacking or IT incident that allowed an unauthorized party to gain access to consumers’ protected health information. HomecareGPS initiated a review of the affected files to determine what specific information had been compromised and which consumers were involved.

According to the HHS‑OCR filing, the breach affected 31,248 individuals and was categorized as a hacking/IT incident. While HomecareGPS has not publicly disclosed the exact data types that were compromised, the nature of the filing with HHS‑OCR suggests that the exposed information likely constitutes protected health information. Protected health information includes any identifying health-related data that can be linked to a specific individual, such as medical history, demographic details, or health insurance information. The company’s internal review aimed to identify the precise scope of the exposure and the individuals whose records were accessed.

Elgon Information Systems, based in Worcester, Massachusetts, develops software solutions that assist home healthcare agencies with compliance and operational efficiency, and it also creates customized versions of its software for individual clients. The company employs more than 25 people and generates approximately five million dollars in annual revenue. HomecareGPS continues to cooperate with regulatory authorities as the investigation into the breach proceeds.

Sources

Sources available to members: 1 source.