At Console & Associates, our data breach lawyers are closely examining the alleged PointClickCare data breach. This data breach was disclosed following a cyber security incident at PointClickCare, which potentially exposed sensitive personal identifiable information of patients at multiple long-term care facilities, including Citadel of Northbrook and Pavilion of Bridgeview.
According to website notices posted by affected healthcare facilities, the PointClickCare data breach occurred due to a cyber security incident involving unauthorized access to their Electronic Health Records (EHR) platform. The incident was first discovered on July 20, 2024, when suspicious activity was detected within the system. Further investigation revealed that an unauthorized actor had used compromised credentials to access and acquire patient information stored on the platform. The compromised information includes:
Data breach letters were sent out by affected facilities on November 25, 2024, informing individuals about the nature of the incident and compromised data.
For more detailed guidance, explore our “Guide for Victims of a Data Breach” to better understand measures you can take to protect yourself after a data breach.
PointClickCare has established itself as a cornerstone in the healthcare software industry, operating from its headquarters in Ontario, Canada. As a leading provider of third-party management services, the company serves a diverse range of healthcare facilities, including skilled nursing facilities, senior living communities, hospitals, and health plans.
With a workforce of more than 2,000 employees and annual revenue reaching approximately $420 million, PointClickCare plays a vital role in healthcare infrastructure management. Their services extend beyond basic electronic health records, encompassing comprehensive solutions for patient care management, billing systems, and regulatory compliance. The company's significant market presence is evidenced by their partnerships with major healthcare organizations, including facilities owned by Omnia Healthcare Group.
How do you know that you were affected by the PointClickCare data breach? Usually victims receive a NOTICE OF DATA BREACH in the mail, but the impact of a breach can be felt long before notices are sent to those affected. This can be in the form of fraudulent financial activity and other forms of identity theft.
If you believe you were affected, we encourage you to reach out to our data breach law firm for legal assistance through a no-cost consultation about your situation. We will review your eligibility to file a data breach class action lawsuit and discuss your legal rights and any compensation that may be available to you.
Complete our confidential contact form below and a member of our legal team will be in touch.