Healthcare Company Ascension Suffers Massive Cyberattack
Health care company Ascension lost sensitive data for nearly 5.6 million individuals in a cyberattack that was attributed to a notorious ransomware gang, according to documents filed with the attorney general of Maine.
Background of the Attack
Ascension owns 140 hospitals and scores of assisted living facilities. In May, the organization was hit with an attack that caused mass disruptions as staff was forced to move to manual processes that caused errors, delayed or lost lab results, and diversions of ambulances to other hospitals. Ascension managed to restore most services by mid-June. At the time, the company said the attackers had stolen protected health information and personally identifiable information for an undisclosed number of people.
Investigation Concluded
A filing Ascension made earlier in December revealed that nearly 5.6 million people were affected by the breach. Data stolen depended on the particular person but included:
Types of Data Stolen
- Individuals’ names and medical information (e.g., medical record numbers, dates of service, types of lab tests, or procedure codes)
- Payment information (e.g., credit card information or bank account numbers)
- Insurance information (e.g., Medicaid/Medicare ID, policy number, or insurance claim)
- Government identification (e.g., Social Security numbers, tax identification numbers, driver’s license numbers, or passport numbers)
- Other personal information (such as date of birth or address)
Conclusion
The cyberattack on Ascension highlights the importance of robust cybersecurity measures in the healthcare industry. The breach had significant consequences for the organization and its patients, emphasizing the need for vigilance and proactive measures to prevent such incidents in the future.
FAQs
Q: How many people were affected by the breach?
A: Nearly 5.6 million individuals were affected by the breach.
Q: What types of data were stolen?
A: The stolen data included individuals’ names and medical information, payment information, insurance information, government identification, and other personal information.
Q: When did the attack occur?
A: The attack occurred in May, and Ascension managed to restore most services by mid-June.
Q: Who is responsible for the attack?
A: The attack was attributed to a notorious ransomware gang.
