Oklahoma-based Avem Health Partners suffered a third-party data breach incident that occurred at 365 Data Centers that affected around 271,303 individuals. The exposed files contained patient information, including patient names, dates of birth, Social Security numbers, driver’s license numbers, health insurance information, and diagnosis and treatment information. Avem mailed letters to patients whose information was potentially involved in the breach

Avem Health Partners suffered a data breach due to unauthorized access at their third-party vendor, 365 Data Centers, exposing sensitive information of 271,303 individuals. The breach, discovered on October 6, 2022, compromised driver’s license numbers and personal health details, raising significant risks of identity theft and fraud. While notification letters were sent to two affected Maine residents on December 13, 2022, the scale of the incident suggests broader implications for customer trust and regulatory compliance. The company offered identity theft protection services as a remedial measure, but the exposure of highly sensitive health and identification data underscores severe reputational and operational risks. The breach originated from a third-party vendor, highlighting vulnerabilities in supply chain cybersecurity and the potential for cascading legal and financial consequences.