An updated data breach report shows a printing and mailing vendor’s original estimate of the number of individuals affected by an apparent ransomware attack was inaccurate by more than 100%, and the new total nearly reaches 2.7 million.
The updated breach report filed to the Maine attorney general’s office on Aug. 26 says 2.65 million individuals – including nine Maine residents – were affected by an “external system breach hacking” incident detected on July 15.
OneTouchPoint’s original breach report to Maine’s attorney general and the U.S. Department of Health and Human Services on July 27 said the incident affected nearly 1.1 million individuals.
A breach notification statement posted on the company’s website in July indicated that 38 health plan clients had been affected by the incident, although that number could also grow.
OneTouchPoint did not immediately respond to Information Security Media Group’s request for comment.
Regulatory attorney Rachel Rose says that it is not uncommon for the number of individuals affected by a breach to climb significantly after the incident has been first reported to regulators, due a number of reasons, including progress of the forensics investigation.
