Ascension offers credit monitoring after ransomware attack exposes patient data
Ascension says files with patient data possibly taken in ransomware attack; free credit monitoring offered during breach investigation. Ascension, a healthcare system in Florida, Alabama, and Austin, has been hit by a May ransomware incident that exposed files from seven servers that may contain patient data. The company is offering free credit monitoring to all patients while it investigates the incident. The attack was caused by an employee accidentally downloading a malicious file, an "honest mistake" and is believed to have exposed patient data from seven out of about 25,000 servers. The incident occurred when the servers were used for daily tasks and are separate from the hospital system's electronic health record databases. Patients can request credit monitoring by calling 1-888-498-8066, even if their data was not affected. Ascension restored EHR access last week after the attack forced a switch to manual processes.
Pubblicato : 3 settimane fa di http://www.facebook.com/cbsaustin, CBS Austin in
Ascension said Wednesday that attackers in a May ransomware incident took files from a small number of servers that may contain patient data. The company is offering free credit monitoring to all patients while it investigates.
The files were taken from seven out of about 25,000 servers, Ascension said. Those servers were mainly used by employees for daily tasks and are separate from the hospital system's electronic health record databases.
Ascension believes the attack started when an employee accidentally downloaded a malicious file, which it called an "honest mistake." There is no evidence data was taken from EHR systems where complete patient records are stored, the company said.
Ascension is still working to determine what specific data may have been compromised. Patients can request free credit monitoring by calling 1-888-498-8066, even if their data was not affected.
The hospital system said it will notify individuals and regulators as required once the investigation is finished. Ascension previously said it restored EHR access last week at facilities in Florida, Alabama and Austin after the attack forced a switch to manual processes.
"We regret any disruption or concern you may have experienced as a result of this incident," an Ascension spokesperson said in a statement.
Temi: Security, Security Breach, Ransomware, Cyber Crime