NextGen Healthcare Data Breach Affects One Million Individuals

NextGen Healthcare, a healthcare solutions provider based in Atlanta, Georgia, began informing around one million individuals that their information was compromised in a data breach. The organization makes and sells electronic health records software and provides doctors and medical professionals with practice management services.

The notification letters claim that NextGen Healthcare initially identified suspicious activity on its systems on March 30th, while an investigation into the incident revealed that an unauthorized party had access to those systems between March 29th and April 14th. Attackers reportedly had access to personal information such as names, addresses, birth dates, and Social Security numbers during that time. However, NextGen Healthcare has stressed they have no evidence of attackers accessing health or medical records data.

Earlier this year, NextGen Healthcare was targeted by a known ransomware group, but the company has not commented if this is connected to the data breach.