"Goshen Medical Center, which runs sites across North Carolina, has this week reported a sizeable breach affecting 456,385 people. The types of data exposed varied for each individual, but basic personal information, as well as social security numbers, driver's license numbers, and medical record numbers were exposed during this attack, which went undetected for almost a month. A notice issued to affected individuals stated that the healthcare provider noticed signs of a break-in on March 4, and came to learn that it began on February 15."
"Further east, Retina Group of Florida reported itself to individual state attorneys general and the Department for Health and Human Services on September 16, admitting to its own attack that affected 153,429. In letters sent to affected clients, the group redacted the types of information involved. However, law firm Levi & Korsinsky, which is investigating the case for a potential lawsuit, said that impacted data may include sensitive personal and protected health information."
"MAB did not specify when its attack took place, or when it was detected, only that it identified the affected individuals on July 7 and that they will receive a letter informing of them of the breach soon, if they have not already. A copy of the letter [PDF] was posted to its website, revealing that names, dates of birth, driver's license/state ID numbers, social security numbers, medical treatment information, and health insurance information was affected."
Three separate breaches at healthcare providers exposed sensitive data for a combined total of 856,525 individuals: Goshen Medical Center (456,385), Retina Group of Florida (153,429), and Medical Associates of Brevard (246,711). Exposed information included names, dates of birth, Social Security numbers, driver's license or state ID numbers, medical record and treatment details, health insurance information, and, for some, financial account data. Breaches occurred between February and November 2024 and went undetected for periods ranging from days to nearly a month. Notifications, regulatory filings, and at least one law firm investigation followed the discoveries.
#healthcare-data-breach #protected-health-information #personally-identifiable-information #cybersecurity-incident
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]