Anna Jaques Hospital has confirmed on its web site {that a} ransomware assault it suffered nearly precisely a yr in the past, on December 25, 2023, uncovered delicate well being information of greater than 310,000 sufferers.
Anna Jaques is a nonprofit group hospital in Massachusetts, acknowledged for offering high-quality care and performing greater than 4,700 surgical procedures yearly.
As a mid-sized acute care hospital with 83 beds, 200 physicians and 1,200 workers members, AJH performs a vital position within the Merrimack Valley, North Shore and southern New Hampshire, offering important healthcare companies to the native inhabitants.
In 2023, at Christmas, Anna Jaques realized {that a} cyberattack had affected particular techniques and took quick motion to comprise the injury by taking them offline and alerting authorities.
The healthcare group launched an investigation on January 24, 2024, a number of days after the ‘Cash Message’ ransomware group started publicly extorting the hospital on January 19.
Menace actors leaked information samples allegedly stolen from Anna Jaques on her darkish internet extortion website, threatening to reveal delicate affected person info if their calls for weren’t met.
Subsequent updates on the Cash Message web page confirmed that hospital directors didn’t work together with the menace actors and the state of affairs culminated within the launch of all information on January 26.
Supply: BleepingComputer
Anna Jaques says the forensic investigation into what the menace actors had stolen was exhaustive and prolonged, and concerned guide doc assessment, so it was not accomplished till November 5, 2024.
Based on the associated entry within the Maine Legal professional Common’s Workplace, the place Anna Jaques posted a pattern of the notification despatched to the affected individuals yesterday, the incident has impacted 316,342 sufferers.
Based on its outcomes, the next info has been offered:
- Demographic info
- Medical info
- Medical insurance info
- Social safety quantity
- Driver’s license quantity
- Monetary info
- Different private or well being info offered to Anna Jacques
“Anna Jaques has no indication that any fraud occurred because of this incident,” learn the advert.
“Nonetheless, out of an abundance of warning, efficient December 5, 2024, Anna Jaques notified people whose info might have been affected because of the incident to the extent Anna Jaques had their deal with.”
“Moreover, Anna Jaques reminds her workers and sufferers to stay vigilant and periodically assessment monetary statements for any fraudulent exercise.”
These affected are supplied credit score monitoring and identification safety companies for twenty-four months by way of Experian and 1B and are urged to contemplate inserting a fraud alert or safety freeze on their credit score file.
