There’s an update to a case involving theft of patient identity information to support a fraud ring. As in the previous press release by DOJ, they do not mention the identity of the entity whose EHR system was compromised or misused by the criminals. A search on LinkedIn, however, indicates that a Lydia Henslee, who…
Category: Health Data
MN: Apple Valley Clinic notifies 157,939 patients about Netgain Technology breach
In November, 2020, cloud IT services provider Netgain Technology LLC experienced a ransomware attack that resulted in them taking some of their data centers offline. In December and January, they began notifying some of their clients. In January, Ramsey County notified 8,700 clients of its Family Health Division about the breach. In February, Woodcreek Provider…
Hackers backdoor PHP source code after internal repo hack
Catalin Cimpanu reports: Hackers have breached the internal Git repository of the PHP programming language and have added a backdoor to the PHP source code in an attack that took place over the weekend, on Sunday, March 28. The backdoor mechanism was first spotted by Michael Voříšek, a Czech-based software engineer. If the malicious code had made it…
NC: Lexington Medical Center discloses vendor’s patient records data breach
Richard Craver reports: Lexington Medical Center said Friday that some patients have been affected by a data breach into the information technology platform of former third-party vendor Healthgrades Operating Co. Inc. The hospital said affected patients are being mailed notices by Healthgrades about the security incident. Healthgrades had assisted the hospital with patient and community…
NZ: Canterbury District Health Board apologizes for software privacy breach
Lee Kenny reports: Canterbury District Health Board (CDHB) has apologised for a software coding error which allowed people to see other patients’ private information when they booked a Covid-19 vaccination appointment. The error meant the details of 716 individuals who had registered were potentially able to be viewed. Read more on Stuff.
NY: Personal Touch Holding Corp. hit by ransomware attack at MSP, more than 750,000 affected
March 25, 2021 /PRNewswire/ — Today, Personal Touch Holding Corp. (PTHC) announced it is addressing a data breach it discovered on January 27, 2021. PTHC is the parent company of subsidiaries that operate Medicare-certified home health agencies, licensed home care service agencies, hospice at home services and Early Intervention Programs, as well as a managed care plan…