Watsonville Community Hospital still hasn't notified all those affected by a November data breach; employees are reporting tax refund fraud

Watsonville Community Hospital is facing severe fallout from a cyber-attack disclosed in November 2024, as approximately 20 employees are now victims of identity theft involving fraudulent tax filings in their names. Hospital representatives confirmed that some employees received IRS notifications regarding unauthorized tax returns. Despite the attackers, identified as the Termite group, being linked to Babuk ransomware, the hospital has not classified the incident as such. There are ongoing issues regarding employee notifications and the absence of updates on breach status in public health tools.

Just months after Watsonville Community Hospital suffered a cyberattack, approximately 20 employees are now reporting identity theft after fraudulent tax filings in their names were attempted.

The hospital has yet to update its status on the HHS public breach tool, raising concerns about transparency following the incident that was first disclosed in November 2024.

Read at Databreaches