Hack to Lifespire Services, Inc. Affects 15,000 People

Lifespire is a company that focuses on generating a better quality of life for people with developmental delays or other disabilities. This includes minors, adults with disabilities, and seniors who just can’t take care of themselves anymore. These people are always at higher risk after breaches; a person with a developmental delay probably doesn’t need to worry about what a phishing attack is, making them more susceptible. If the breach included the addresses of the victim, it also makes them an easier target for kidnappers and the like. We should never take hacks lightly, but they only become more severe in situations like this.

How Did the Attack Occur?

Sometime between January 14 and February 8, 2022, an unauthorized party had practically unlimited access to the personal information of Lifespire patients. The accessed data is vast and threatening, leaving patients and their families in an unnecessary place of fear. These people did nothing wrong; why are they the victims? Once Lfespire noticed a glitch in its systems, it immediately cut off its computer systems to prohibit further access.

What Information Was Viewed or Stolen?

Lifespire sent out a notice to affected customers after the data breach. In it, it stated, “Following a thorough analysis, on October 7, 2022, our investigation determined that the potentially affected information included names, addresses, Social Security numbers, dates of birth, driver’s license numbers, passport numbers, bank account information, credit card information, medical diagnosis/treatment information, Medicare/Medicaid numbers, and health insurance information.”

How Did Lifespire Admit to the Breach?

Lifespire admitted to the breach after an official filing with the U.S. Department of Health and Human Services Office for Civil Rights. The company not only sent out letters directly to the affected customers but also placed a notice on its website to help ensure that anyone visiting would notice, hopefully keeping the surprise and panic down.

What Will Become of the Stolen Information?

In the spirit of total honesty, we can only give you an idea of what the hacker could do with the information– and you won’t like it. As we stated earlier, the hacker knowing the addresses of the customers puts them at very high risk for things like assault and kidnapping. The hacker can access some very sensitive and personal information with things like driver’s license numbers and passport numbers. And while perhaps not the most dangerous physically, this one can quickly clean out your bank account; the hacker gained access to the insurance information of the victims. Therefore, the hacker can use the victim’s insurance or even steal their prescriptions, resulting in massive problems for the individual.

What Should Affected Parties Do in the Aftermath of the Breach?

If you or a loved one were affected by this breach, here are a few steps to take. First, invest in protection software. This software will scan the dark web for your information and alert you if your data is on an unauthorized site. Next, keep an eye on things like your credit reports. While it would be nice, we doubt the hacker stole your information to pay off your student loans for you.

Last but not least, remain vigilant. Watch incoming messages and calls to ensure that they aren’t phishing attacks that could put you or a loved one at risk. Putting these together will significantly improve your safety, leaving way more time for fun.