On September 3, 2024, Gryphon Healthcare discovered a significant data breach that had occurred on July 6, 2024. This breach affected a total of 393,358 individuals across the United States, with 47 of those individuals residing in Maine.
The breach involved unauthorized access to sensitive consumer information, including personal and medical data.
The types of information exposed in this breach were extensive and included:
The breach was reported to the public on October 11, 2024, and Gryphon Healthcare has notified affected consumers through written communication. The breach was also disclosed to the Maine Attorney General's office and the California Attorney General's office.
In response to this data breach, Gryphon Healthcare has taken several steps to mitigate the impact and prevent future incidents. The company has engaged cybersecurity experts to investigate the breach and enhance their security measures. They are also offering support to affected individuals, including guidance on protecting their personal information.
If you have been notified by Gryphon Healthcare that your information was part of this breach, it is important to take immediate action to protect yourself. Here are some recommended steps:
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.