Premier Family Medical in Utah is notifying 320,000 patients of a ransomware incident that they disclosed in August. The incident has now been posted on HHS’s public breach tool after the physician group notified HHS several days ago.
In an August 30th notice on their website, practice explained that on July 8, they experienced a ransomware attack. Their site notice does not indicate what type of ransomware was involved, how much the ransom demand was, and whether Premier considered paying it, paid it, or didn’t contact the attackers at all.
Patients who have been treated at any of Premier’s ten Utah County locations will be receiving notification letters, even though Premier’s investigation found no evidence that any patient data was accessed or exfiltrated.