Gryphon Healthcare, LLC Data Breach Investigation

Migliaccio & Rathod LLP is involved in the Gryphon Healthcare LLC data breach investigation that affected approximately 393,358 individuals and their personal information.

On August 13, 2024, Gryphon Healthcare LLC discovered suspicious activity on its network and launched an investigation to determine the nature and scope of the breach. The investigation concluded on September 3, 2024, and determined that the unauthorized access occurred on or about July 6, 2024. The data security incident involved a partner that Gryphon provides medical billing services for, which resulted in unauthorized access to certain personal and/or protected health information maintained by Gryphon. As a result of this third-party security incident, an unauthorized actor may have accessed certain files and data containing information relative to patients for whom Gryphon provides medical billing services. Affected consumers were not notified of the Gryphon Healthcare LLC data breach until October 11, 2024. Gryphon Healthcare LLC discovered that hackers were able to compromise a significant amount of personal information. The compromised information includes a variety of highly sensitive details including:

  • Name,
  • Date of birth,
  • Address,
  • Social Security number,
  • Dates of service,
  • Diagnosis information,
  • Health insurance information,
  • Medical treatment information,
  • Prescription information,
  • Provider information and
  • Medical record number

The Gryphon Healthcare LLC Data Breach Investigation

Gryphon Healthcare LLC informed the Maine State Attorney General’s office of the breach, where a copy of the consumer notification letter can be found. All of the information stolen is likely valuable and dangerous to affected victims. As is likely to be the case with the Gryphon Healthcare LLC data breach, in previous data breaches, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, to unauthorized credit card applications, to medical services or government services ordered in their name, to their information being posted on the dark web, to a massive uptick in the number of spam text messages, calls and emails received.

Are you a Gryphon Healthcare LLC customer concerned that you might be affected by this breach?

If you have concerns that you have been affected by this breach, we would like to hear from you.  Please complete the contact form on this page, send us an email at [email protected], or give us a call at (202) 470-3520.

The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches such as this. More information about our current cases and investigations is available on our blog.

Office of the Maine AG notification

Consumer Data Breach Notification Letter