Criminals stole over 3.3 million medical records including patients’ names, social security numbers, addresses, dates of birth, diagnosis and treatment information, laboratory test results, prescription data, radiology reports, health plan member numbers, and phone numbers in December 2022 according to the US Department of Health.
One of the medical groups affected said in a notice posted to their website, “After extensive review, malware was detected on some of our servers, which a threat actor utilized to access and exfiltrate data,”. No group or individual has claimed responsibility for the attack.