Thursday, May 1, 2025
HomeCyber AttackApria Healthcare Hacked - Over 2M Users Data Exposed

Apria Healthcare Hacked – Over 2M Users Data Exposed

Published on

SIEM as a Service

Follow Us on Google News

Apria HealthCare Inc. is a leading home medical equipment and clinical support provider. The company was founded in 1924 and had a net worth of $644 million headquartered in Indianapolis, US.

On 23rd May 2023, Apria released a notification letter stating that the company had faced a data breach that could have exposed some customers’ personal information. It was also said that they are currently investigating this incident.

Course of Events

Apria received a notification from a threat actor on September 1, 2021, which stated that they have access to some of the Apria systems. Apria took immediate action to mitigate the incident working alongside the Federal Bureau of Investigation (FBI) and some forensic investigators.

- Advertisement - Google News

It was revealed that the threat actor had gained unauthorized access to the Apria systems, consisting of some personal information. The unauthorized third-party access was found to be from April 5, 2019, to May 7, 2019, and from August 27, 2021, to October 10, 2021.

Information Involved

Furthermore, it was revealed that the unauthorized access was mainly targeted for fraudulent funds and not for accessing patients’ personal information.

Apria also claimed that there was no evidence of fraudulent fund transactions, claims, or evidence relating to the misuse of stolen personal information. 

Apria stated, “There is no evidence of funds removed, and Apria is not aware of the misuse of personal information related to this incident. A small number of emails and files were confirmed to have been accessed, but there is no proof that any data was taken from any system.”

Actions taken by Apria

Apria has implemented additional security measures concerning the guidance and recommendations provided by forensic investigators, which will prevent similar data breaches in the future.

As compensation, Apria is providing Identity Monitoring service Kroll at no cost to customers for one year. Kroll is a leading risk mitigation and response provider, and they can help people who have faced unintentional confidential data exposure.

Kroll services offered

Apria stated that services from Kroll include,

  • Single Bureau Credit Monitoring
  • Fraud Consultation
  • Identity Theft Restoration

These services can be utilized by affected customers that are provided as compensation for Apria’s data breach.

Data breaches are becoming very common. It is recommended that organizations implement all the security measures and invest a good amount of money in terms of cybersecurity for the organization.

Shut Down Phishing Attacks with Device Posture Security – Download Free E-Book

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Apache ActiveMQ Vulnerability Lets Remote Hackers Execute Arbitrary Code

A high vulnerability in Apache ActiveMQ’s .NET Message Service (NMS) library has been uncovered,...

Commvault Confirms Zero-Day Attack Breached Its Azure Cloud Environment

Commvault, a global leader in data protection and information management, has confirmed that a...

FBI Uncovers 42,000 Phishing Domains Tied to LabHost PhaaS Operation

The Federal Bureau of Investigation (FBI) has revealed the existence of 42,000 phishing domains...

Tor Browser 14.5.1 Released with Enhanced Security and New Features

The Tor Project has announced the official release of Tor Browser 14.5.1, introducing a...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Apache ActiveMQ Vulnerability Lets Remote Hackers Execute Arbitrary Code

A high vulnerability in Apache ActiveMQ’s .NET Message Service (NMS) library has been uncovered,...

Commvault Confirms Zero-Day Attack Breached Its Azure Cloud Environment

Commvault, a global leader in data protection and information management, has confirmed that a...

FBI Uncovers 42,000 Phishing Domains Tied to LabHost PhaaS Operation

The Federal Bureau of Investigation (FBI) has revealed the existence of 42,000 phishing domains...