Nuance Communications/Progress MOVEit Data Breach Investigation

On September 22, 2023, Nuance Communications is expected to send notification letters to patients of several North Carolina hospitals and/or medical organizations informing them of a breach of personal and protected health information. The breach was the result of  a vulnerability in MOVEit Transfer (a file transfer tool produced by Progress Software and used by Nuance) and it compromised the patients’  names, demographic information (including address, phone number, email address, gender, date of birth); relative’s names; power of attorney’s names; health insurance numbers; dates of service; medical facility; practitioner’s names; diagnostic study identifiers such as accession number and study UID; clinical information such as treatments provided, medication information, diagnoses, diagnostic imaging reports (no diagnostic images were impacted); and patient identifiers such as medical record numbers. The breach occurred on May 28, 2023, and Nuance learned they were a party to the breach on May 31, 2023. The individuals affected are patients of the hospitals and medical organizations listed below. If you receive a notification that your personal information was compromised due to Nuance Communications use of the Progress Software MOVEit Transfer and you would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.