Kaiser Data Breach Exposes 13.4 Million Patients

Local Kaiser Permanente Members Affected by Major Data Breach, Personal Health Information Exposed

Kaiser Permanente members in our community are among the over 13.4 million patients nationwide whose personal and health data may have been exposed in a significant data breach. The incident did not stem from a direct cyberattack on Kaiser Permanente’s systems but rather from a vulnerability in a third-party software product called MOVEit Transfer, developed by Progress Software, which Kaiser Permanente utilizes.

The security flaw within the MOVEit Transfer software was initially identified in May 2023. Kaiser Permanente was subsequently notified in July 2023 that its members’ data had been affected due to this vulnerability. The sensitive information potentially accessed is extensive and includes members’ names, home addresses, email addresses, phone numbers, and birth dates. Additionally, medical record numbers, health plan names, and specific health service information, such as diagnoses and treatments, could also have been compromised.

This particular MOVEit Transfer vulnerability has had a widespread global impact, affecting more than 2,600 organizations and an estimated 93 million individuals worldwide. Experts are categorizing this as one of the largest data breaches in US history.

Kaiser Permanente members are strongly advised to take proactive measures to protect themselves. It is crucial to regularly monitor credit reports for any suspicious activity. Members should also exercise extreme caution regarding any unsolicited emails, text messages, or phone calls, as these could be phishing attempts designed to exploit the compromised data.

Kaiser Permanente is offering free credit monitoring services to affected members, and it is highly recommended that eligible individuals enroll in these services. For more comprehensive information on the broader scope of organizations impacted by the MOVEit breach, individuals can visit the California Attorney General’s Office website.