On May 20, 2024, El Centro Del Barrio, operating as CentroMed, reported a significant data breach to the Texas Attorney General, revealing that an unauthorized party accessed the confidential information of approximately 400,000 current and former patients. The compromised data includes names, addresses, dates of birth, Social Security numbers, financial account information, medical records numbers, health insurance details, and diagnosis and treatment information.
The breach was discovered on May 1, 2024, when CentroMed detected unusual activity within its IT network. Immediate steps were taken to secure the system, and an investigation was launched. The investigation determined that unauthorized access occurred on April 30, 2024, allowing the party to acquire sensitive patient information. Following the breach, CentroMed began notifying affected individuals on May 17, 2024, outlining the specific information compromised for each person.
For patients receiving a notification letter from CentroMed, it is crucial to understand the potential risks and take appropriate steps to protect themselves from fraud or identity theft. Legal advice can help patients understand their options and take necessary actions following the breach.
CentroMed has not yet disclosed the exact cause of the breach, but more information is expected as the investigation continues. In a notice posted on its website, CentroMed reassured patients that they are taking steps to enhance their security measures and prevent future incidents.
This is the second significant data breach for CentroMed within a year. The previous incident, reported on June 12, 2023, affected 350,000 Texans.
CentroMed, founded in 1971 and based in San Antonio, operates over 25 primary care clinics, pharmacies, and other healthcare facilities across San Antonio, New Braunfels, and Somerset. The organization employs more than 517 people and generates around $93 million in annual revenue.
