"An orthopedic center with several locations in the Capital Region faces a $500,000 fine for failing to protect patient information. The New York Attorney General, Letitia James, said an investigation into Orthopedics NY LLP found the orthopedic medicine and surgery center failed to adequately protect its systems, exposing the personal information of more than 650,000 patients and employees. The AG's office said cyberattackers gained remote access to OrthopedicsNY's patient data in 2023 by using compromised login credentials."
"Read more at News10. CBS6 provides additional details. In addition to providing credit monitoring for patients, they are required to do the following: Maintaining a comprehensive information security program Limiting access to patient and employee data Implementing multi-factor authentication for remote network access Encrypting sensitive patient and employee data Monitoring systems for suspicious activity Conducting annual risk assessments to identify security threats"
Orthopedics NY LLP faces a $500,000 penalty for failing to protect patient and employee information after a 2023 cyberattack. Cyberattackers used compromised login credentials to gain remote access and downloaded unencrypted files containing Social Security, driver's license, and passport numbers for roughly 110,000 people. More than 650,000 patients and employees had personal information exposed. Required remedies include offering credit monitoring and implementing a comprehensive information security program with limited access controls, multi-factor authentication for remote access, encryption of sensitive data, continuous monitoring for suspicious activity, and annual risk assessments. The incident was a ransomware attack attributed to the INC ransom gang, and no press release appears on the NYS Attorney General's website.
Read at DataBreaches.Net
Unable to calculate read time
Collection
[
|
...
]