Kannact

Kannact operates within the healthcare sector in the United States. The organisation handles sensitive patient information, including protected health information such as medical diagnoses and treatment records. Its operations involve processing personal identifiers like Social Security numbers, driver's license details, names, birthdates, and contact information. This indicates core activities centered around managing substantial volumes of confidential patient data, likely tied to healthcare administration or service provision. The nationwide impact of a significant data breach affecting over 117,000 individuals confirms its services extend across the country.

The organisation relies on third-party tools for critical functions such as file transfer, evidenced by its use of Fortra's GoAnywhere solution. A major external system breach occurred in early 2023 due to the compromise of this third-party tool by the Clop ransomware group. This incident resulted in unauthorized access to and exfiltration of highly sensitive personal and health data belonging to patients. The breach led to public leaks of stolen customer files and necessitated written notifications to affected individuals. Kannact responded by offering impacted persons 12 months of credit monitoring and identity theft protection services, highlighting its obligations concerning data protection and breach response within the regulated healthcare environment.