Harvard Pilgrim Health Care ( HPHC) has revealed that a ransomware attack that took place in April resulted in a data breach affecting 2,550,922 people. The attackers were able to steal sensitive data from compromised systems.
The Massachusetts-based nonprofit health shared this information on the U.S. Department of Health and Human Services'.
Last week, the organization informed through a publication that the attackers behind the ransomware had access to its systems between March 28 and April 17, 2023, when the breach was discovered.
A more recent investigation conducted by third-party cybersecurity experts revealed that cybercriminals managed to gain access to sensitive data from HPHC's network.
See also: Horabot botnet: New malicious campaign targets email accounts
“ Unfortunately, the investigation found evidence that data was copied and taken from the systems from March 28, 2023 to April 17, 2023 ,” the statement said
“We are continuing our investigation and conducting extensive system before resuming our normal business operations.“.
The stolen files include:
- Full names
- Physical addresses
- Telephone numbers
- Dates of birth
- Health insurance account information
- Social Security Numbers
- Provider tax registration numbers
- Clinical information, including medical history, diagnoses, treatment, dates of services, and provider names
According to the organization's notice, the data breach affects current and former members of Harvard Pilgrim.
See also: SeroXen RAT malware targets gamers
It is worth noting that the above information could expose affected individuals to attacks phishing or social engineering. Affected individuals should be careful with the messages and emails they receive in the coming period. However, HPHC has said that it has not identified any cases of data misuse at this time.
Harvard Pilgrim Health Care also provides credit monitoring to and identity theft protection services protect individuals affected by the breach.
At present, no ransomware group has claimed responsibility for the attack on the HPHC organization.
Most ransomware gangs exploit stolen data to pressure victims into paying the ransom. If victims refuse to pay, the attackers can also sell the data to other cybercriminals or make it public.
See also: RomCom backdoor: Distributed via fake Google Ads promoting ChatGPT and others
Ransomware is a serious threat to our digital lives and requires constant vigilance to stay protected. The impact of a ransomware attack can be devastating, resulting in the loss of valuable data and financial losses. The best defense against ransomware is prevention. You should take steps to secure your digital life. These include, among others, backing up your data and regularly updating your antivirus software. This way, you can stay one step ahead of cybercriminals and keep your digital life safe.
Source: www.bleepingcomputer.com
