ConnectOnCall Security Incident Update
Posted on May 15
On May 12, 2024, Phreesia learned of a service disruption to ConnectOnCall, a subsidiary Phreesia acquired in October 2023. While investigating this matter, we determined that a cybercriminal had gained access to ConnectOnCall.
The ConnectOnCall service remains offline, and we are working diligently to assess the potential impact and restore the service. We have engaged with law enforcement, and we are working with a third-party cybersecurity firm and other experts to support our investigation.
The ConnectOnCall service is separate from Phreesia’s other services, including our patient intake platform. Based on our investigation to date, there is no evidence that our other services have been affected. We understand the importance of this service to our clients’ business, and we are working to restore the ConnectOnCall service as quickly as possible.
We have notified ConnectOnCall and Phreesia customers regarding this matter. For any questions, please contact us at privacy@phreesia.com.
Additionally, as of this time, the incident has not had a material impact on our overall business operations, nor do we believe the incident is likely to have a material impact, based on our investigation to date and our current understanding that this incident is limited to the ConnectOnCall service.