Ransomware Attack on Texas Eye Clinic

A Texas eye care practice has been hit by a ransomware attack that resulted in the encryption of files on its computer systems. The attack affected Victoria Surgery Center, Victoria Eye Center and Victoria Vision Center and involved the personal and protected health information of 80,122 individuals.

See also: Trego County hospital hit by ransomware attack

The attack was discovered on March 21, 2024, when file encryption made certain computer systems inaccessible. Third-party investigators were hired to assist in the investigation and to help secure the systems, restore access to patient information, and determine the extent to which information . The investigation confirmed that there was unauthorized access to systems and that certain files containing patient data were accessed during the attack.

An audit of the ophthalmology practice’s records was recently completed and confirmed that names, addresses and medical IDs were compromised in the ransomware attack. Affected individuals have now been notified and are being offered 12 months of credit monitoring and identity protection services . Steps have been taken to prevent similar incidents in the future, including reviewing and revising internal data management and protocols and strengthening security measures.

See also: London Drugs: LockBit ransomware gang threatens to leak data

Texas Panhandle Centers, a Certified Community Health Clinic based in Amarillo, TX, discovered that there was unauthorized access to its computer systems and exposure of personal and health information of 16,394 patients. It does not state when the unauthorized access was discovered, only that it occurred on October 17, 2023.The investigation confirmed on or about April 19, 2024, that certain records containing patient information were potentially obtained by an unauthorized person.

Examination of these records revealed that they contained patient names, dates of birth, medical record numbers, social security numbers, driver’s license numbers, diagnosis/condition information, laboratory test results, medications, health care claims information, and clinic/treatment information. A subset of these individuals also had their Social Security numbers exposed. While patient data has been exposed, Texas Panhandle Centers said it is not aware of any misuse of patient data.

See also: Florida company hit by Medusa ransomware attack

What are the basic steps to protect against ransomware?

Staff training is critical to protecting against ransomware attacks, such as the one at the Texas eye clinic. Employees need to know how to recognize suspicious emails and links. Regularly backing up data is essential. Backups should be stored on secure and isolated systems. Using up-to-date security software is also crucial. Implementing security policies, such as limiting access to critical systems and data, can reduce the risk of infection. Using strong and unique passwords for each account and changing them regularly can prevent attackers from accessing systems and data. Finally, implementing multi-factor authentication (MFA) adds an extra layer of security, making it more difficult for attackers to gain access.

Source: hipaajournal