5.6 Million Patients' Data Stolen During Ascension’s Ransomware Attack Earlier This Year – MedCity News

The cyberattack that Ascension suffered in Might resulted within the publicity of 5.6 million sufferers’ private and well being data, in line with a current breach notification filed with the Maine Lawyer Normal.

The well being system is offering all impacted sufferers credit score monitoring and identification safety companies freed from cost. The uncovered information contains private data similar to bank card numbers, checking account numbers, Social Safety numbers, driver’s license numbers and addresses, in addition to medical data like process codes and sorts of lab exams.

There isn’t any proof that information was stolen from Acension’s EHR or different scientific techniques, although, the well being system stated in an announcement final week. 

When Ascension — the fourth-largest well being system within the nation — was attacked earlier this yr, there have been main repercussions by way of each affected person security and operational effectivity. 

Hospitals throughout a number of states went offline, ambulances needed to be diverted to hospitals whose techniques had been nonetheless functioning, and hundreds of clinicians needed to revert to paper recordkeeping. It took weeks for Ascension to completely restore its EHR and scientific operations, with issues normalizing in mid-June.

The assault additionally had a serious impact on the well being system’s funds. Ascension’s monetary outcomes for the fourth-quarter fiscal yr 2024 revealed a $1.8 billion working margin loss, which was due largely to the cyberattack.

Ransomware group Black Basta claimed accountability for the assault. The cybergang — which is believed to be an offshoot of the infamous Russian cybercriminal group Conti — has impacted greater than 500 organizations internationally, in line with a Might discover from the Cybersecurity and Infrastructure Safety Company (CISA).

Healthcare cyberattacks of this scale are prone to proceed, in line with Tim Rawlins, senior adviser and director of safety at cybersecurity consultancy NCC Group.

“Healthcare will all the time be a gorgeous goal, given the sheer amount of delicate information organizations maintain and the necessity to make data accessible to the medical workers as shortly as doable. This case displays that scenario. It’s also indicative of the scenario we see in so many medical establishments — investing in preserving IT techniques patched, safe and segmented will all the time take second place to a brand new medical gadget in most docs’ minds,” he stated in an announcement despatched to MedCity Information.

Picture: JuSun, Getty Photos