Greater than 437,000 sufferers have been impacted by a just lately disclosed information breach, non-profit healthcare system Ascension Well being instructed the US Division of Well being and Human Companies (HHS).
The incident didn’t contain Ascension Well being’s methods, however a enterprise companion to which Ascension inadvertently uncovered affected person information, the group mentioned roughly two weeks in the past.
The information, Ascension mentioned, was stolen after hackers focused a vulnerability in third-party software program the enterprise companion was utilizing.
Given the group’s description of the incident and that it occurred in early December, it’s possible that the knowledge was stolen within the assault on Cleo’s file switch platform, by which the Cl0p ransomware group exfiltrated information from a number of corporations, together with Hertz Company and Western Alliance Financial institution.
When disclosing the information breach, Ascension mentioned that the knowledge pertained to its places in Alabama, Michigan, Indiana, Tennessee, and Texas, however didn’t share particulars on the variety of probably affected people.
Nevertheless, a Friday replace to the HHS’s information breach portal reveals that the hackers stole the knowledge of 437,329 Ascension sufferers.
The compromised info contains names, addresses, e mail addresses, cellphone numbers, Social Safety numbers, analysis and medical health insurance info, and different particulars.
Ascension is offering the impacted individuals with 24 months of free credit score monitoring and identification theft safety companies.Commercial. Scroll to proceed studying.
Whereas the variety of affected people is important, the incident pales in dimension when in comparison with the Might 2024 information breach that Ascension disclosed after falling sufferer to a BlackBasta ransomware assault, which impacted 5.6 million individuals.
Associated: 160,000 Impacted by Valsoft Knowledge Breach
Associated: Kelly Advantages Knowledge Breach Influence Grows to 400,000 People
Associated: 4 Million Affected by VeriSource Knowledge Breach
Associated: African Telecom Large MTN Group Discloses Knowledge Breach