A former employee benefits service provider for the accounting firm Reznick Group has suffered a security breach that may have exposed the personal information of current and former employees of the firm, their spouses and dependents.
The firm said Friday that it was informed of a computer server security breach by AssureCare Risk Management, which serviced Reznick’s benefits plan from 2001 to 2006 through Colonial Healthcare.
The hacking incidents occurred on May 9 and 10, when intruders were able to gain access to AssureCare’s public cloud server. The server held personal information and health information of the benefits plan participants. The firm noted that the breach was not caused by, or the result of, any action or inaction by Reznick Group.
AssureCare has hired a computer forensic security investigation firm to review the incident, but was not able to find specific evidence to establish whether any of the data was copied. However, the firm noted that the hackers who accessed the server may have copied some or all of the data. The identity of the intruders is unknown, and the server has been deactivated.
So far, there is no evidence to suggest the information stored on the server has been misused, but Reznick is nevertheless taking precautionary measures. The firm has notified the affected current and former employees, and their spouses and dependents, of the security breach and advised them to monitor all of their financial and health records. In addition, the firm has offered them a credit monitoring service at no cost for 12 months for the three major credit bureaus. It has also advised them to obtain a credit report, place a fraud alert, and /or place a security freeze on their credit report.
In addition, Reznick has filed a report with the U.S. Department of Health and Human Services, as required by the Health Information Technology for Economic and Clinical Health Act.
For more information, visit
