Called your doctor after-hours? ConnectOnCall hackers may have stolen your medical data

ConnectOnCall is alerting almost a million individuals whose personal and health information was stolen in a May data breach. ConnectOnCall, owned by healthcare tech company Phreesia, provides a digital answering service to healthcare providers for handling calls from patients outside of working hours.

The May breach involves information shared between patients and doctor’s offices that relied on ConnectOnCall, such as patient names, phone numbers, and dates of birth, as well as information related to health conditions, treatments, and prescriptions. ConnectOnCall said some Social Security numbers were swiped in the breach, too.

Phreesia did not state how many individuals were affected but was required to disclose to the U.S. Department of Health and Human Services that it was notifying 914,138 people that they had their information stolen.

By the government’s ongoing data breach count, the hack at ConnectOnCall was the 14th largest healthcare-related data breach of 2024 so far.