Timberline is based on Des Moines, the capital city of Iowa and it provides services to around 190 schools of Iowa. In recent times, Timber Billing Services LLC faced a cyberattack. After gaining access to the company’s network, the attacker encrypted files and removed information.
Data accessed by the attacker may have included students’ names, Medicaid identification number, dates of birth, and related billing information. Though Timberline could not give accurate information about all the exfiltrated data but they provided a review of the files that could have been accessed. Timberline also concluded that current and former students in schools served by the company may have been impacted.
The company informed the Department of Health and Human Services’ Office for Civil Rights about the incident and reported that a total of 116,131 individuals were affected due to the data breach. Moreover the company has been offering free credit monitoring and identity protection services to all the affected students. As a preventive measure, the company has vowed to improve its security systems in order to prevent such attacks in future.