Major Data Breach at Uintah Basin Healthcare Impacts Over 100,000 Patients

• Uintah Basin Healthcare suffered a data breach affecting over 100,000 individuals’ personal and health information.
• UBH has responded by offering affected parties free identity protection services and implementing additional security measures.

ROOSEVELT, UTAH – Uintah Basin Healthcare (UBH), a leading healthcare system in Utah, recently reported a severe data breach potentially affecting the personal and protected health information of 103,974 individuals.

The healthcare provider detected unusual activity on its network on November 7, 2022, and promptly secured its digital environment. UBH also hired a top cybersecurity firm to investigate the matter.

The investigation revealed on April 7, 2023, that an unauthorized individual may have accessed or acquired personal and protected health information belonging to patients who had received care at UBH between March 2012 and November 2022. The information compromised may include names, addresses, dates of birth, Social Security numbers, health insurance information, and specific clinical details, such as diagnosis, medications, test results, and procedure information.

Laura Funk, counsel to UBH from the law firm Constangy, Brooks, Smith & Prophete, LLP, noted that there is currently no evidence to suggest misuse or attempted misuse of the compromised information.

In compliance with Maine’s data breach notification statute, UBH has notified all affected individuals about the incident. The healthcare provider began the process of identifying affected patients and completed mailing out notifications on April 10, 2023.

In response to the breach, UBH is taking proactive measures to support affected individuals and strengthen its security infrastructure. The healthcare provider is offering free credit monitoring and identity protection services through IDX, a trusted identity protection company, to the individuals affected by the breach.

On the security front, UBH has implemented a series of technical measures to minimize the risk of such incidents in the future. These measures include a global password reset across its environment and the deployment of SentinelOne, a state-of-the-art endpoint detection and response tool providing continuous monitoring.

The incident took place between October 25, 2022, and November 7, 2022, but it was not discovered until April 2023, emphasizing the complexity and stealthy nature of such security breaches.

Uintah Basin Healthcare (UBH) is a non-profit community hospital situated in Roosevelt, Utah, United States. Established in 1944, the hospital primarily serves communities within Duchesne and Uintah counties. It’s operated by Uintah Basin Healthcare (UBH), a non-profit 501(c)3 corporation, providing care to approximately 40,000 people in Uintah County. The hospital is a part of a broader network of clinics, specialty clinics, and other healthcare services designed to help the residents of the Uintah Basin improve their health and wellness. With 42 beds, Uintah Basin Medical Center is recognized as a Level IV trauma center, offering a wide range of medical services​.