Upstate Home Care

Upstate Home Care, also known as Upstate Home Health Care and Upstate Homecare, is a organization headquartered in the United States of America that provides home‑based health and supportive services to patients. Its name indicates a focus on delivering care in residential settings rather than in hospitals or clinics. The organization handles personal and medical information as part of its routine operations, which includes treatment records, physician details and insurance identifiers.

On November 4 2021, Upstate Home Care suffered a ransomware attack that led to the exfiltration of a broad range of patient data. The stolen information comprised names, dates of birth, contact details, government‑issued identifiers, financial account numbers, treatment records, physician names, patient IDs and Medicare/Medicaid identifiers. After the breach, the data was posted on a darknet leak site, exposing the affected individuals to potential misuse. In response, the organization initiated a security review, deployed enhanced protective controls, notified all impacted patients and offered them free identity‑theft monitoring services.

A second ransomware event occurred on March 11 2021, when the Pysa group used mespinoza malware to target multiple U.S. healthcare providers, including Upstate Home Care. The attackers encrypted and exfiltrated sensitive data such as Social Security numbers, medical histories and treatment records, then threatened public release unless a ransom was paid. While some victims like Assured Imaging and OrthoAtlanta disclosed the incidents and issued public notices, other organizations chose silence despite clear evidence of data exposure. Pysa maintained a dark web site that listed non‑compliant victims, increasing pressure on those who refused to negotiate. This episode highlighted the uneven approach to breach disclosure across the healthcare sector, with certain entities lacking a legal duty to inform affected individuals even after confirmed data theft.

Taken together, these incidents illustrate that Upstate Home Care manages substantial volumes of protected health information, making it an attractive target for cybercriminals seeking valuable personal data. The organization’s post‑breach actions—conducting reviews, strengthening safeguards, notifying patients and providing credit‑monitoring—demonstrate a reactive effort to mitigate harm and restore trust. Its experience also underscores the broader challenges faced by home‑health providers in securing patient information against evolving ransomware threats while navigating inconsistent regulatory expectations for breach disclosure.