Coastal Hospice & Palliative Care

The Vermont Office of the Attorney General disclosed a data breach at Coastal Hospice & Palliative Care, first detected on July 24, 2023, and reported publicly on January 22, 2024. The incident stemmed from a network disruption, compromising personal and/or protected health information (PHI) of an undetermined number of individuals. While the exact scope of the breach including the type of data exposed (e.g., medical records, financial details, identifiers) and the number of affected patients or employees remains unclear, the nature of the exposed information suggests a high-risk scenario. Hospice and palliative care providers handle highly sensitive data, including end-of-life care details, patient diagnoses, and family contacts, which could be exploited for identity theft, fraud, or targeted scams. The lack of transparency regarding the breach’s specifics exacerbates concerns about long-term reputational damage, regulatory penalties (HIPAA violations), and potential harm to vulnerable patients. Given the sector’s reliance on trust, the incident may erode confidence among patients, families, and healthcare partners, while also inviting scrutiny from state and federal regulators.

Source: https://ago.vermont.gov/document/2024-01-22-coastal-hospice-palliative-care-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/hospice-palliative-care-inc

"id": "hos014091825",
"linkid": "hospice-palliative-care-inc",
"type": "Breach",
"date": "7/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Vermont, USA',
                        'name': 'Coastal Hospice & Palliative Care',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (includes protected health '
                                        'information)',
                 'type_of_data_compromised': ['personal information',
                                              'protected health information']},
 'date_detected': '2023-07-24',
 'date_publicly_disclosed': '2024-01-22',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Coastal Hospice & Palliative Care on January '
                '22, 2024. The breach occurred on July 24, 2023, due to a '
                'network disruption, potentially affecting personal and/or '
                'protected health information; however, the specific number of '
                'affected individuals and the exact information compromised '
                'are unknown.',
 'impact': {'data_compromised': ['personal information',
                                 'protected health information']},
 'references': [{'date_accessed': '2024-01-22',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at Coastal Hospice & Palliative Care',
 'type': 'Data Breach'}