Data Breach Notifications

Entity Information

  • Type of Organization: Healthcare
  • Entity Name: NextGen Healthcare, Inc.
  • Street Address: 18111 Von Karmen Ave., Suite 600
  • City: Irvine
  • State, or Country if outside the US: California
  • Zip Code: 92612

Submitted By

  • Name: Kari M. Rollins
  • Title: Partner, Outside Counsel
  • Firm name (if different than entity): Sheppard Mullin Richter & Hampton LLP
  • Telephone Number: 212-634-3077
  • Email Address: krollins@sheppardmullin.com
  • Relationship to entity whose information was compromised: Outside Counsel

Breach Information

  • Total number of persons affected (including residents): 1049375
  • Total number of Maine residents affected: 3913
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
  • Date(s) Breach Occured: 03/29/2023 to 04/14/2023
  • Date Breach Discovered: 04/24/2023
  • Description of the Breach:
    • Other
    • If other, please specify: Unauthorized access to database stemming from use of stolen client credentials that appear to have been stolen from other sources or incidents unrelated to NextGen
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 04/28/2023
  • Copy of notice to affected Maine residents: NextGen Individual Notification Letter.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24 months of free fraud detection and identity theft protection through Experian's IdentityWorks program.