Proliance Surgeons prolianceseattle.com Proliance Surgeons data breach: what happened and what to do
Proliance Surgeons, a Washington state surgery group, reported a ransomware attack that began on February 11, 2023. It affected 437,392 people, with names, dates of birth, Social Security numbers and diagnoses among the data involved.
View all 13,115 breaches- Breach date
- 11 Feb 2023
- Affected
- 437,392
- Data exposed
- Names, Dates of birth, Physical addresses, Driver's licenses, Social security numbers, Financial information, Diagnoses
- Last updated
Proliance Surgeons is a group of surgeons based in Washington state. In November 2023 it told the U.S. Department of Health and Human Services (HHS) that a ransomware attack had affected the health information of 437,392 people. Washington's Attorney General also lists the notice.
What happened
According to reporting on the notice, attackers got into the group's network on February 11, 2023. Ransomware is software that locks files until the victim pays, and in this case the group found that files and systems had been encrypted. Proliance reported the breach to HHS on November 17, 2023 and mailed letters to affected patients that month. It also posted a notice on its website and told the media.
What was exposed
HHS's description of the case lists names, dates of birth, addresses, driver's license numbers, Social Security numbers, financial information and diagnoses. Press coverage of the notice also mentions medical treatment and health insurance information. Not everyone had every item exposed, so the letter you receive is the best guide to your own case.
Health records combined with a Social Security number are a useful package for identity thieves. They can open credit in your name, file false tax returns or make convincing calls that quote your diagnosis back to you. Medical details also make phishing messages harder to spot.
The company's response
Proliance offered free credit monitoring and said it added administrative and technical safeguards. The group was later sued over the attack. If you got a letter, the monitoring offer has an enrollment deadline, so use it.
What to do if you were in it
- 1
Freeze your credit
Placing a freeze at Equifax, Experian and TransUnion is free and stops new credit being opened in your name. Lift it temporarily when you apply for credit yourself.
- 2
Watch your statements and credit reports
Look over bank and card statements for charges you don't recognize. You can pull free credit reports at annualcreditreport.com.
- 3
Read your insurer's statements
Check explanation-of-benefits letters for treatment you never received. Medical identity theft shows up there first. Call your insurer if anything looks wrong.
- 4
Use the credit monitoring offer
If Proliance sent you a letter, enroll in the free monitoring it describes before the deadline in the letter.
- 5
Expect phishing that mentions this breach
Criminals use leaked names and emails to write convincing messages. Don't click links in unexpected emails or texts, and go to the company's site by typing the address yourself.
- 6
Check whether your email or phone is in this and other breaches
Run a free Serus scan. It looks across breach databases and the dark web for your email and phone number and tells you what to do about each hit.
Frequently asked
Was I affected by the Proliance Surgeons breach?
Proliance mailed letters to the 437,392 people it identified. If you were a patient and got no letter, contact the group directly to ask.
What was exposed?
HHS's case description lists names, dates of birth, addresses, driver's license and Social Security numbers, financial information and diagnoses. What each person lost varied.
When did the attack happen?
The attackers entered the network on February 11, 2023. Proliance reported the breach to HHS on November 17, 2023.
Should I freeze my credit?
Yes, if your Social Security number was in your letter. A freeze is free and blocks new accounts in your name.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
