Nova Biomedical novabiomedical.com Nova Biomedical data breach: what happened and what to do
Nova Biomedical Corporation told HHS in August 2021 that a ransomware attack affected 3,774 people. The exposed data included names, dates of birth, health insurance information and Social Security numbers.
View all 13,177 breaches- Breach date
- 17 Aug 2021
- Made public
- 17 Aug 2021
- Affected
- 3,774
- Data exposed
- Names, Dates of birth, Health insurance information, Social security numbers
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Nova Biomedical Corporation reported to the U.S. Department of Health and Human Services (HHS) that it was the victim of a ransomware attack. The HHS breach portal lists 3,774 affected people and an August 2021 report date.
Per HHS's case description, the protected health information involved names, dates of birth, health insurance information and Social Security numbers. Nova Biomedical notified HHS, the affected individuals and the media, and posted substitute notice. It offered affected people complimentary credit monitoring.
A name, date of birth and Social Security number together are what a criminal needs to apply for credit in someone's name, so a credit freeze is the step that matters most here. Insurance details can also be misused for medical identity theft.
This page covers the incident HHS recorded in 2021. Nova Biomedical has reported other incidents since, which are separate.
If you got a letter, take the credit monitoring if it's still on offer. The FTC recommends using it, and pairing it with a freeze.
You can also look up your own details: run a free Serus scan to see whether your email or phone shows up in breaches, so you know whether to repeat these steps.
Sources checked: ocrportal.hhs.gov, consumer.ftc.gov, identitytheft.gov
Last verified against the official page:
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion, as the FTC explains. It blocks most new accounts opened in your name and you can lift it when you need credit.
- 2
Check your statements and insurance paperwork
Read bank statements and the explanation of benefits your health insurer sends, and question anything you don't recognize. If someone misuses your details, report it at IdentityTheft.gov.
- 3
Expect scams that mention the breach
Treat unexpected emails, texts and calls about the incident as suspect. Don't click links in them; use the contact details on the organization's own website or letter.
- 4
Use the credit monitoring if you were offered it
The notice offered complimentary credit monitoring. Check your letter for how to enroll and whether the offer is still open.
- 5
Check your email and phone in other breaches
Run a free Serus scan to see whether your email or phone appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you when your data shows up. It can't remove data from a breach.
Official filings
- U.S. Department of Health and Human Services , filed 17 Aug 2021 : 3,774 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to U.S. Department of Health and Human Services
Frequently asked
How many people were affected?
HHS lists 3,774 people.
What data was exposed?
HHS says names, dates of birth, health insurance information and Social Security numbers.
Was this ransomware?
Yes, according to HHS's description of the case.
Should I freeze my credit?
If your Social Security number was involved, yes. The FTC says a freeze is free and lasts until you lift it.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
