US family planning nonprofit MFHS says patient medical data stolen in ransomware attack

U.S. nonprofit healthcare large Maternal & Household Well being Providers has confirmed hackers accessed delicate affected person, monetary and medical info months earlier.

In an advisory published on its web site on Thursday, MFHS stated a “refined ransomware incident” uncovered the delicate info of present and former sufferers, staff and distributors. This info included names, addresses, dates of delivery, Social Safety numbers, driver’s license numbers, monetary account knowledge and cost card info, usernames and passwords, and medical and medical health insurance info.

The group, which serves greater than 90,000 people throughout Pennsylvania, stated it was made conscious of the incident on April 4, 2022 however might have been initially compromised way back to August 21, 2021, citing an investigation carried out by an unnamed forensic incident response agency.

It then took MFHS an extra 9 months to publicly disclose the incident.

When reached for remark, Patrick McGloin, a associate at Gaffney Bennett, a public relations agency representing MFHS, declined to reply our questions past offering a boilerplate assertion. It’s not but identified why MFHS didn’t publicly disclose the cyberattack sooner, who was behind the assault, or whether or not MFHS paid a ransom demand.

Healthcare organizations are a frequent goal for ransomware assaults, and not less than 25 healthcare suppliers working 290 hospitals have been hit by ransomware in 2022, in keeping with recent data from Emsisoft. This consists of Chicago-based medical large CommonSpirit Well being, which confirmed that an October ransomware assault uncovered the non-public knowledge of greater than 620,000 sufferers.