Security News > 2023 > December > 2.5M patients infected with data loss in Norton Healthcare ransomware outbreak

Norton Healthcare, which runs eight hospitals and more than 30 clinics in Kentucky and Indiana, has admitted crooks may have stolen 2.5 million people's most sensitive data during a ransomware attack in May. During the intrusion, the criminals accessed names, contact information, Social Security Numbers, dates of birth, and may have included may have also included driver's license and government ID numbers, financial account information, and digital signatures.

The not-for-profit healthcare system said it discovered the security incident, later determined to be a ransomware infection, on May 9, two days after the intrusion.

"Our investigation determined that an unauthorized individual(s) gained access to certain network storage devices between May 7, 2023, and May 9, 2023, but did not access Norton Healthcare's medical record system or Norton MyChart," Norton said in a statement on its website.

Norton declined to answer The Register's specific questions about the intrusion, including if AlphV was behind the breach.

"Norton Healthcare takes the personal information of our patients and employees seriously," spokesperson Renee Murphy told The Register.

At least 36 US health systems that oversee 130 hospitals have experienced ransomware attacks this year, and the criminals stole data in at least 27 of these instances, according to Emsisoft threat analyst Brett Callow.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/12/11/norton_healthcare_ransomware/