Mom’s Meals Data Breach: Over 1.2 Million Customers’ Sensitive Data Exposed
Last updated:
A serious data breach at Mom’s Meals, a medical meal delivery service, has put the personal and health information of more than 1.2 million customers at risk. The company confirmed the incident, which originated from a ransomware attack, highlighting the significant data security challenges faced by businesses that handle sensitive client information.
The Ransomware Attack and its Fallout
According to the company, Mom’s Meals first identified suspicious activity on its networks in late February 2023. This led to the discovery that a ransomware attack had successfully encrypted files on its systems. Despite the attack occurring in February, the incident remained quiet for months, only coming to public attention after an employee anonymously notified a local news outlet in March about an “internet issue” that had disrupted operations.
It wasn’t until July 10, 2023, that Mom’s Meals officially confirmed the full extent of the data breach, revealing that hackers had gained access to a vast amount of confidential customer data.
What Sensitive Data Was Compromised?
The list of compromised information is extensive and highly sensitive, making this a particularly concerning healthcare data breach. The stolen data includes:
- Personally Identifiable Information (PII): Full names, dates of birth, driver’s licenses, state ID numbers, and some Social Security numbers.
- Financial Information: Financial account details and payment card information.
- Protected Health Information (PHI): Medical record numbers, Medicare and Medicaid IDs, health and treatment information, diagnosis codes, health insurance details, and patient ID numbers.
The sheer volume and type of data compromised—including both financial and medical records—make affected individuals highly vulnerable to identity theft and financial fraud. This incident is a stark reminder of why businesses handling such a wide variety of customer information are prime targets for cybercriminals seeking a quick profit.
Request an IT assessment
Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.
About the author: Steve Shaff
Steve Shaff is the owner of PDX Information Technology Services, a managed IT provider he founded in 2020. From the Tualatin office he helps businesses across Portland Metro & Southwest Washington with IT support, cybersecurity and compliance. More about Steve · Contact PDX IT
Infostealer malware copies saved passwords and live session cookies from a browser and sells them on the dark web, which lets attackers walk past MFA. Here’s how it works and a practical 10-step plan for Portland-area small businesses.
Modern ransomware gangs don’t just lock your files. They copy your data first, then threaten to publish or sell it on the dark web. Here is how double extortion works and what Portland-area small businesses can do before, during and after an attack.
Portland small business mobile security checklist: lock phones, avoid risky public Wi-Fi, secure office wireless, spot text scams and handle lost phones.