Anna Jaques Hospital has confirmed on its web site that a ransomware assault it suffered virtually exactly a 12 months in the past, on December 25, 2023, has uncovered delicate well being knowledge for over 310,000 sufferers.
Anna Jaques is a not-for-profit neighborhood hospital in Massachusetts, acknowledged for delivering high-quality care and performing over 4,700 surgical procedures yearly.
As a mid-size acute hospital offering 83 beds, 200 physicians, and 1,200 workers members, AJH performs a vital position in Merrimack Valley, North Shore, and southern New Hampshire, offering important healthcare providers to the native inhabitants.
In 2023, at Christmas time, Anna Jaques realized {that a} cyberattack had impacted particular programs and took speedy motion to include the harm by taking them offline and alerting legislation enforcement.
The healthcare group launched an investigation on January 24, 2024, a couple of days after the ‘Cash Message’ ransomware group started publicly extorting the hospital on January 19.
The menace actors leaked knowledge samples allegedly stolen from Anna Jaques on their darkish internet extortion web site, threatening to reveal delicate affected person info if their calls for weren’t met.
Subsequent updates on the Cash Message web page confirmed that the hospital’s directors did not interact with the menace actors, and the scenario culminated with the discharge of all knowledge on January 26.
Supply: BleepingComputer
Anna Jaques states that the forensic investigation into what the menace actors had stolen was thorough and prolonged, involving handbook doc assessment, so it was solely accomplished on November 5, 2024.
Based on the associated entry on the Workplace of the Maine Lawyer Normal, the place Anna Jaques posted a pattern of the notification it despatched to affected people yesterday, the incident has impacted 316,342 sufferers.
Based on its outcomes, the next info has been uncovered:
- Demographic info
- Medical info
- Medical health insurance info
- Social Safety quantity
- Driver’s license quantity
- Monetary info
- Different private or well being info supplied to Anna Jacques
“Anna Jaques has no indication that there has been any fraud as a result of this incident,” reads the announcement.
“However, out of an abundance of caution, commencing on December 5, 2024, Anna Jaques notified individuals whose information may have been impacted as a result of the incident to the extent Anna Jaques had their address.”
“Additionally, Anna Jaques reminds its employees and patients to remain vigilant in reviewing financial account statements on a regular basis for any fraudulent activity.”
These impacted are provided 24-month-long id safety and credit score monitoring providers by Experian and 1B and are urged to think about inserting a fraud alert or safety freeze on their credit score file.
