Lenka Ponikelska reports: A campaign of serious hacker attacks on Czech hospitals is highly probable in the coming days, the country’s National Cyber and Information Security Agency said. The warning follows an attack last month at the Faculty Hospital in the second-largest Czech city of Brno, where officials were forced to evacuate patients. The threat…
Category: Health Data
PA: Meadville Medical Center still not fully recovered from malware attack in March
On January 30, the Meadville Tribune reported that Meadville Medical Center was investigating what appeared to be an attack on the employee payroll system. No patient data was believed to have been impacted. On March 26, however, and only days after furloughing hundreds of employees due to the decreased volume of patients coming to the…
MD: Doctors Community Medical Center notifies patients after phishing incident put patient info at risk
Doctors Community Medical Center in Maryland is notifying an unreported number of patients whose protected health information was potentially compromised by a phishing incident. In January, the center noticed unusual network activity in its payroll system. Their investigation revealed that a number of employees had fallen for a phishing attack and that the attacker(s) had…
Saint Francis Ministries Will Be Notifying Patients of Breach
Saint Francis Ministries issued a press release on Friday. It states, in relevant part: On December 19, 2019, Saint Francis became aware of suspicious activity relating to one of its employee’s email accounts. Saint Francis took steps to secure the email account and began working with outside computer forensics specialists to determine the nature and scope of the activity. On February…
Personal Touch and Crossroads Technologies sued after Maze Team attack
As reported by TopClassActions: A former patient says that home health provider Personal Touch failed to protect patients and customers from a ransomware attack on their computerized records. The hospital ransomware class action lawsuit was filed by plaintiff Lugenia Booker, who says that her personal information was included in the computer records of Personal Touch Holding…
Less than two weeks after an Indiana hospital reported a phishing-related HIPAA breach, they had a second one
I was working today on adding details to spreadsheets that I use in calculating the gap between breach and discovery, and between discovery and notification. One of the incidents I was looking into today involved a report from Lafayette Regional Rehabilitation Hospital in Indiana. On November 25, they learned that in July, 2019 someone had…