NorthBay Healthcare Corporation (NorthBay Health), a not-for-profit healthcare system, is notifying more than 569,000 individuals that their personal data was exposed due to a security breach caused by a ransomware attack a year ago.
See also: Frederick Health hit by Ransomware attack
The organization reported that it detected unauthorized access to its network on February 23, 2024.However, the attackers had managed to gain access to its systems from January 11 to April 1.
During this time, the attackers gained access to a number of files containing sensitive personal information. This included names, dates of birth, social security numbers, driver's license numbers, passport and other government ID numbers, as well as medical and biometric data.
The hackers gained access to usernames, passwords, financial data, and credit or debit card numbers. In addition, for some users, they revealed expiration dates, security codes, and/or PINs.
See also: UnitedHealth: 2024 data breach ultimately affected 190 million people
In a statement to the Maine Attorney General's Office, NorthBay Health said it is sending written notices to 569,012 people affected by the incident. It did not specify how many of those were patients or employees.
The organization told those affected that it does not believe their personal information was used for identity theft or fraud, but is providing them with a year of free identity protection and credit monitoring services.
NorthBay Health did not specifically say that ransomware in the breach, but the attack forced it to shut down its systems on April 1, a typical response to ransomware. No known ransomware group has claimed responsibility for the incident, suggesting that a ransom may have been paid.
The system outage, which forced workers to revert to manual processes at NorthBay Health’s facilities in Fairfield and Vacaville and patients to be transferred to other locations, lasted at least two weeks. The organization worked methodically to slowly restore the affected systems.
See also: BayMark Health Services notifies patients of breach
Health data breaches have become an increasingly concerning issue in the digital age. When sensitive health information is exposed, they pose significant risks to individuals, including identity theft, financial fraud, and the potential misuse of private medical records. Such breaches can occur due to weak cybersecurity measures, insider threats, or sophisticated hacking targeting healthcare systems. Addressing this challenge requires strong data protection protocols, regular security assessments, and strict compliance with regulations like HIPAA to safeguard sensitive patient information and maintain trust in healthcare services.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
