Security News > 2023 > March > Zoll Medical says intruders had 1M+ patient, staff records at their fingertips

Medical device and software maker Zoll Medical says the personal and health information of more than a million people, including patients and employees, may have been stolen by crooks in January.

Officials with Zoll, a company owned by Japanese multinational chemical company Asahi Kasei and based in Chelmsford, Massachusetts, said in the letter that there was no indication that the exposed information has been misused.

The Register has contacted Zoll for additional information.

Critical Insight, a cybersecurity-as-a-service provider, found that in the second half of 2022, while the number of data intrusions declined 9 percent over the first six months of the year, the number of individual records exposed during breaches jumped 35 percent, reaching 28 million.

In the wake of the breach, Zoll is offering patients whose Social Security numbers were exposed 24 months of Experian's IdentityWorks identity protection and credit monitoring program for free and 36 months for current and former employees and their dependents.

In late 2018, the health and personal data of more than 277,000 patients was exposed by a configuration error during a server migration by third-party vendor Barracuda Networks, leading to a lawsuit.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/03/13/zoll_medical_data_intrusion/