Mississippi Health-Care System Reports Data Breach, Williamson County
Breach Type –
Unknown, Data Breach
GovTech
March 9th, 2023
- "Community Health Systems said in a press release that protected information such as names, addresses, insurance information, medical information, birth dates and social security numbers of patients and employees may have been disclosed during the breach."
- "According to an SEC filing, the company estimates information about 1 million individuals may have been affected by the security breach. The company hasn't responded to questions about how many of those people were from Mississippi."
- ”The data breach occurred between Jan. 28, 2023, and Jan. 30, 2023.”
- ”Patients who think they may have been affected by the 2023 breach can enroll in an Experian credit monitoring service provided by CHSPSC at no cost for 24 months, as required by state law.”
Read More
Tennessee health system reports RCM vendor data breach., Shelby County
Breach Type –
Unknown, Data Breach
Becker Hospital Review
February 20th, 2023
- ”Tennessee health system reports RCM vendor data breach"
- "On Dec. 15, Reventics learned that an unauthorized party accessed its servers and launched an investigation into the incident.”
- ”The investigation determined that on Dec. 27, the unauthorized party had transferred files from its system, including files that contained patient information from Regional One, according to a Feb. 14 breach notification from Regional One..”
- ”The files contained patient information such as names, patient addresses, dates of birth, Social Security numbers, medical record numbers, patient account numbers, financial information, driver's license, and more."
- ”The RCM vendor did not mention how many people were affected by the breach, but said it has contained the incident, as well as implemented new technical safeguards in order to prevent another incident.”
Read More
Healthcare giant CHS reports first data breach in GoAnywhere hacks, Williamson County
Breach Type –
Hacking, Data Breach
Bleeping Computer
February 14th, 2023
- "Community Health Systems (CHS) says it was impacted by a recent wave of attacks targeting a zero-day vulnerability in Fortra’s GoAnywhere MFT secure file transfer platform.”
- "The healthcare provider giant said on Monday that Fortra issued an alert saying that it had "experienced a security incident" leading to some CHS data being compromised."
- "A subsequent investigation revealed that the resulting data breach affected the personal and health information of up to 1 million patients.”
- ”With regard to the PHI and PI compromised by the Fortra breach, the Company currently estimates that approximately one million individuals may have been affected by this attack.”
- ”CHS is a leading healthcare provider that operates 79 affiliated acute-care hospitals and over 1,000 other sites of care across the United States.”
Read More
HCMC Addresses Third Party Data Breach, Henry County
Breach Type –
Hacking, Data Breach
Henry County Medical Center News
June 20th, 2022
- "MCG Health, a contracted third-party that Henry County Medical Center utilizes, recently reported they have experienced a data security breach."
- "However, because patient information is shared with MCG Health in the process of caring for our patients, some HCMC patients could be impacted by this breach."
- "MCG Health determined that an unauthorized party previously obtained personal information that matched data stored on MCG’s computer systems. The personal information may include some or all of the following: names, Social Security number, medical codes, postal addresses, telephone number, email addresses, dates of birth, and gender."
- "Those affected by this breach have or will be receiving a letter from MCG with further details. In this letter, those affected will be offered identity protection and credit monitoring services for two years at no cost."
Read More
Ballad Health: Some patient information may have been accessed in data breach, Washington County
Breach Type –
Hacking, Data Breach
WHJL News Channel 11
April 8th, 2022
- “Ballad Health provided notice of a “data privacy incident” on Friday."
- “The healthcare system said that in January an investigation began after unusual activity was noticed on an employee’s e-mail account. On Feb. 17, it was determined that the employee’s e-mail account was accessed without authorization for a “limited” amount of time"
- “Ballad says it was not possible to determine which messages or attachments may have been accessed or viewed without permission, but out of an abundance of caution, a manual review of the account’s contents was performed in order to see whether sensitive information was contained in them."
- "The statement says that the types of personal information that could have been accessed include: Name, Address, DOB, Medical History, Medical Condition, Treatment information, Medical record number, Diagnosis code, Patient account number."
- "Since the event, Ballad says it has taken steps to secure the employee’s e-mail account. The statement also says the company is continuing to educate its workforce on the importance of security regarding Ballad’s email system and have altered state and federal regulators to the incident."
Read More
Personal info system breached during 'cyber incident' at Children’s Hospital, Knox County
Breach Type –Unknown, Malware
ABC 6 WATE
April 6th, 2022
- "East Tennessee Children’s Hospital is working to determine the scope of a cyber incident that may have led to personal information within ETCH’s system being compromised."
- “On March 13, unusual activity was found by ETCH on its network. By the end of that week, ETCH determined some of the documents stored within the system may have been copied or viewed during the cyber incident between March 11-14. "
- “The investigation determined that the unauthorized individuals removed certain files and folders from portions of the network"
- "The system contained the following types of information at the time: names, dates of birth, Social Security numbers, driver’s license or state identification numbers, non-resident identification numbers, other demographic information, medical information, health insurance information, credit or debit card information, financial information, billing information, other personal health information, and usernames and passwords."
- “As their investigation continues, ETCH plans to contact potentially affected individuals and provide information on steps to protect their personal information.”
Read More
Centerstone of Tennessee, Davidson County
Breach Type –
Phishing, Data Breach
WSMV
October 24th, 2020
-
Investigations into security incident started after employee noticed unusual activity involving their email account
-
Forensic firm found current and former Centerstone patients and employees’ personal information was exposed in cyber attack
-
Information that may have been exposed includes name, date of birth, Social Security, driver’s license, medical diagnosis, health care information and more
Read More
Tennessee Orthopaedic Alliance, Davidson County
Breach Type -
Phishing, Data Breach
Data Breaches
February 26th, 2020
-
Employee email account accessed by unauthorized party
-
Over 81,000 patients were notified of the breach
-
Names, birthdates, Social Security information among leak
Read More
SouthEast Eye Specialists Group, Williamson County
Breach Type –
Phishing, Data Breach
Becker’s Hospital Review
January 15th, 2020
-
Employee email account accessed by bad actor via phishing
-
IT officials investigated the cyberattack
-
Officials unable to confirm if private information was accessed
Read More
Alive Hospice, Davidson County
Breach Type – Phishing, Data Breach
Health IT Security
July 8th, 2019
- After unusual activity was found connected to 4 employee email accounts, Alive Hospice changed the accounts’ passwords and contacted forensic investigators
- Email accounts impacted had a total of 10,893 patient records and other personal information which varied by account
- Evidence of exfiltration was not found, but could not be ruled out
Read More
Aspire Health, Davidson County
Breach Type - Phishing, Data Breach
Tennessean
September 25th, 2018
- Aspire health employee fell victim to phishing attack
- Hackers exfiltrated some patient data, forwarding private emails to an external account
- The health company immediately locked the compromised account
Read More
Alive Hospice, Davidson Co.
Breach Type - Phishing, Data Breach
Data Breaches
July 14th, 2018
- Alive Hospice employees fall victim to phishing attacks
- Protected Health Information potentially accessed by hackers
- Alive offered identity protection services to its patients
Read More
Smith Dental
Breach Type - Ransomware
Data Breaches
February 7th, 2018
- Smith Dental falls victim to ransomware
- Addressed attack on their webpage, believing no patient data was compromised
- Out of precaution, advises patients to monitor personal info.
Read More
Decatur General Hospital
Breach Type - Cryptomining/Hack
Data Breaches
February 7th, 2018
- Hackers install cryptomining malware on Decatur's server
- The EMR vendor housing the server, promptly notified Decatur
- Hackers did not target patient data in any way
- Out of precaution Decatur notified patients of incident
Read More
Medhost Website
Breach Type - Ransomware
HIS Talk
December 19th, 2017
- Hackers target Medhost website, posted public ransom note online
- Threatened to sell private patient data on dark web, if they did not receive ransom
- Threatened to participate in media release on the general vulnerabilities of HIPAA
- Medhost restored website and did not acknowledge the hack
- Hackers continually targeted Medhost, forcing them to restore systems on multiple occasions
Read More
PrimaryCare Specialists, Inc.
Breach Type - Ransomware
Local Memphis
February 27th, 2017
- Hackers infiltrated two servers
- Accessed personal data of patients, for only five minutes, & encrypted all files
- PrimaryCare notified potentially affected patients
Read More
BACK TO TOP
