Henry Schein disclosed a data breach after at least two consecutive cyberattacks by the BlackCat Ransomware (which took place in 2023). The breach affected over 160,000 people.
Henry Schein is a healthcare solutions provider with operations and subsidiaries in 32 countries.
On October 15, the company revealed that it was forced to take some systems offline to contain a cyberattack that affected production and distribution operations.
See also: Change Healthcare data breach affected 100 million people
Henry Schein itself did not reveal the nature of the attack, but the BlackCat ransomware gang (ALPHV) claimed responsibility, while the hackers also said they stole 35 TB of sensitive files.
Nearly a month later, the company revealed that it had suffered a second attack, again by the BlackCat ransomware gang. The gang claimed to have encrypted Henry Schein's network for a second time after negotiations failed.
The attackers published some of the data stolen from the company on their data leak website.
Now, almost a year later, Henry Schein has confirmed in a data breach notification to the Maine Attorney General that the ransomware gang stole the personal data of 166,432 people.
The company said it worked with cybersecurity to examine potentially affected files and identify information obtained by the hackers.
See also: Transak hit by serious data breach
“This review required significant time and resources and progressed through the first half of 2024.“.
“The investigation recently determined that your personal information was affected as part of the incident. It is possible that other sensitive information about you was also affected, which may depend on information previously provided to the Company.“.
The company is offering affected users a free 24-month subscription to Experian 's IdentityWorksSM to help monitor credit history and detect signs of fraud.
See also: Internet Archive hacked again via stolen authentication tokens
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
In recent years, cyberattacks targeting healthcare organizations have increased. Medical records and personal information are valuable assets on the dark web, making these institutions prime targets for hackers. This trend not only puts individuals’ personal data at risk, but also has serious consequences for the affected companies, including costly legal fees and reputational damage.
To combat this threat, healthcare organizations must prioritize cybersecurity measures and invest in advanced technologies to protect their systems . This includes implementing multi-factor authentication, regularly updating systems, conducting thorough risk assessments, and providing employees with training on best practices for online security .
Source: www.bleepingcomputer.com
