Home Care Providers of Texas’s breach/potential ransomware incident affects 124,363 patients

(Image source: Home Care Providers of Texas, 2023)

One-sentence summary:

Home Care Providers of Texas’s suffered a potential ransomware incident, breaching sensitive data for over 124,363 patients.

Who was involved?

Home Care Providers of Texas (LBN: DPP II, LLC), a threat actor, and 124,363 patients.

What was the timeline?

June 15, 2022: Breach started by the adversary.

June 29, 2022: Breach end by adversary and discovery by Home Care Providers of Texas.

November 15, 2022: Home Care Providers of Texas discovers that sensitive data was breached (Home Care Providers of Texas, n.d., para. 2).

January 13, 2023: Notice is published on the Texas OAG Data Security Breach Reports portal and HCPT begins notification of patients (Office of the Attorney General, 2023).

What occurred?

An adversary hacked Home Care Providers of Texas for several weeks and allegedly breached the sensitive records of over 124,363 patients after attempting to deploy potential ransomware (Davis, 2023, para. 11; Dissent, 2023; McGee, 2023, para. 8; Office of the Attorney General, 2023). Breached data included: “individual names, addresses, dates of birth, social security numbers, certain treatment or diagnosis information, and certain medication information” (Home Care Providers of Texas, n.d., para. 2).

Estimated costs:

M-F call center and breach notification costs. “leading third-party cybersecurity experts” (Home Care Providers of Texas, n.d., para. 2).

Involved laws:

Federal: HIPAA and HITECH.

State: Tex. Bus. & Com. Code §§ 521.002, 521.053

Root cause:

TBA or N/A (see disclaimer)

Lessons learned:

TBA or N/A (see disclaimer)

Sources:

Davis, J. (2023, January 23). Third-party administrator hack leads to theft of patient data for over 251K. SC Media. Retrieved March 5, 2023, from https://www.scmagazine.com/analysis/breach/third-party-administrator-hack-leads-to-theft-of-patient-data-for-over-251k

Dissent. (2023, January 13). Home Care Providers of Texas discloses ransomware incident affecting more than 124,000. databreaches.net. Retrieved March 5, 2023, from https://www.databreaches.net/home-care-providers-of-texas-discloses-ransomware-incident-affecting-more-than-124000/

Home Care Providers of Texas. (n.d.). Notice Regarding Security Event. Retrieved March 5, 2023, from https://hcpoftexas.com/event.htm

Home Care Providers of Texas. (2023, February 27). 547434/f472c393ca817aadd3c262aeb9a9ec0b.png. Workable.com. https://workablehr.s3.amazonaws.com/uploads/photos/547434/f472c393ca817aadd3c262aeb9a9ec0b.png

McGee, M. (2023, January 16). Attacks on 2 Specialty Care Providers Affect Nearly 600,000. Bank Info Security. Retrieved March 5, 2023, from https://www.bankinfosecurity.com/ransomware-breaches-a-20941

Office of the Attorney General. (2023, January 13). Data Security Breach Reports | Office of the Attorney General. Ken Paxton Attorney General of Texas. Retrieved March 5, 2023, from https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage

About Post Author

Kyler Kent CISSP

Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike’s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation—turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master’s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect – Professional, AWS Security – Specialty, and multiple CrowdStrike credentials. He writes to close the gap between “what the textbook says” and what analysts actually do on shift with his published book: "SOC Analyst Career Guide" (ISBN-13: 9781835467466). https://linktr.ee/kentprotect.com Corrections: [email protected]

http://kylerkent.com