BayMark Health Services, North America's largest provider of substance abuse treatment and rehabilitation (SUD) services, is notifying an unknown number of patients that attackers stole their personal and health information in a breach that occurred in September.
See also: Cleo attacks: Clop ransomware gang blackmails 66 companies
The Texas-based organization provides assisted treatment services targeting both substance use and mental health disorders to more than 75,000 patients daily at over 400 service locations in 35 U.S. states and three Canadian provinces.
In data breach notification letters mailed to affected individuals, BayMark revealed that it learned of the breach on October 11, 2024, after an outage of its IT systems. Further investigation revealed that the attackers accessed BayMark’s systems between September 24 and October 14.
The documents exposed during the incident contained various types of data about each affected patient, including their names and:
- Social Security Number
- Driving license number
- Date of birth
- Services received and dates of service provision
- Insurance information
- Providing treatment and/or diagnostic information
See also: RaaS: A growing threat in cyberspace
Baymark Health is now offering one year of free services to patients whose Social Security numbers or driver's license numbers may have been exposed by the breach.
While the healthcare provider did not provide further details about the September attack, the RansomHub claimed the breach in October, saying it stole 1.5TB of files from Baymark Health's compromised systems. The data has since been uploaded to the ransomware group's leak website.
See also: Romanian jailed for involvement in NetWalker ransomware
Ransomware -as-a-Service (RaaS) is a growing threat in the world of cybersecurity. It is a model based on Software as a Service (SaaS), but with a malicious intent. In RaaS, skilled hackers create and distribute ransomware to other, less technically skilled criminals, providing them with the tools to carry out attacks. In return, the creators receive a share of the ransom collected from victims. This form of commercialization of ransomware has made attacks more accessible and widespread, increasing the pressure on businesses and users to invest in protective measures, such as regular back-ups and strong cybersecurity strategies.
Source: bleepingcomputer
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
