Pinnacle Healthcare Data Breach Exposes Sensitive Patient Information Pinnacle, a healthcare services provider, recently disclosed a data breach that may have compromised sensitive personal and health-related information. On November 25, 2024, the organization detected a network disruption affecting certain systems, prompting an immediate investigation. The investigation revealed that an unauthorized third party accessed and potentially acquired patient data between November 11 and November 25, 2024. The exposed information varies by individual but includes highly sensitive details such as: - Personal identifiers: Names, Social Security numbers, addresses, phone numbers, email addresses, driver’s license/state ID numbers, and dates of birth. - Medical records: Diagnoses, treatment details, prescription information, patient ID numbers, provider names, medical record numbers, and Medicare/Medicaid numbers. - Insurance and financial data: Health insurance information, claim and policy numbers, and treatment cost details. Pinnacle has posted a breach notice on its website, confirming that affected individuals will receive a breakdown of the specific data impacted. As part of its response, the organization is offering complimentary credit monitoring services to those affected. The full breach notice is available on Pinnacle’s website.

Pinnacle Holdings Suffers Major Data Breach Exposing Patient and Healthcare Data Healthcare consulting firm Pinnacle Holdings, LTD disclosed a data breach that compromised sensitive information belonging to patients of its healthcare organization clients. The incident was detected on November 25, 2024, after the company identified a network disruption affecting internal systems. An investigation revealed that an unauthorized actor accessed and potentially exfiltrated data from Pinnacle Holdings’ network between November 11 and November 25, 2024. The breach exposed a wide range of personally identifiable information (PII) and protected health information (PHI), including: - Personal details: Names, addresses, phone numbers, email addresses, Social Security numbers, driver’s license/state ID numbers, taxpayer ID numbers, passport numbers, dates of birth, and biometric data. - Financial data: Payment card details and financial account information. - Medical and insurance records: Treatment and diagnosis information, prescription details, patient and encounter ID numbers, provider names, medical record numbers, Medicare/Medicaid numbers, health insurance details, claim and policy numbers, and treatment cost information. In response, Pinnacle Holdings has begun mailing notification letters to affected individuals and established a dedicated call center (1-866-686-2607) for inquiries, operating Monday through Friday from 9 a.m. to 6:30 p.m. ET. The company is also offering complimentary credit monitoring services to impacted parties. The breach underscores the heightened risks of identity theft and fraud due to the breadth of exposed data.