Mystic Valley Elder Services, a Massachusetts-based non-profit that provides health and other services to the elderly and people with disabilities, has suffered a data breach impacting many individuals. 

The intrusion was detected by Mystic Valley Elder Services (MVES) in early April and an investigation was immediately launched. 

The investigation revealed a few months later that the attacker may have stolen files containing personal information, including name, date of birth, Social Security number, passport number, payment card and financial account number, online credentials, driver’s license number, health insurance information, and medical information.

Mystic Valley started notifying impacted individuals in June and has now revealed that tens of thousands of people are affected. 

The organization this week told the attorney general in Maine and the Department of Health and Human Services that approximately 87,000 individuals are impacted.

Cybercriminals often target healthcare organizations and these attacks can impact hundreds of thousands and even millions of people. 

None of the known ransomware groups has taken credit for the attack on Mystic Valley Elder Services. That does not necessarily mean the organization was not targeted by a ransomware group. 

Related: Omni Family Health Data Breach Impacts 470,000 Individuals

Related: Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens

Related: Landmark Admin Discloses Data Breach Impacting 800,000 People

Related: Electric Motor Giant Nidec Confirms Data Stolen in Ransomware Attack