Data breach exposes personal and health information of over 900,000 Americans

ConnectOnCall, a subsidiary of Phreesia, has reported a data breach affecting over 914,000 patients. Unauthorized access occurred between February and May 2024, exposing personal and medical information, including names, phone numbers, and in some cases, Social Security numbers. The company has begun an internal investigation and is working with cybersecurity experts to assess the breach's scope. Phreesia stated that its other services were not impacted by this incident. Affected individuals will receive notification letters by mail. ConnectOnCall is offering identity and credit monitoring services through Kroll for those whose Social Security numbers were compromised.