Health Now Networks
March 25, 2017
•[ leak, misconfiguration, healthcare ]
In March 2017, the telemarketing service Health Now Networks left a database containing hundreds of thousands of medical records exposed. There were over 900,000 records in total containing significant volumes of personal information including names, dates of birth, various medical conditions and operator notes on the individuals' health. The data included over 320k unique email addresses.
Welsh NHS
March 13, 2017
•[ leak, healthcare ]
Details of thousands of medical staff of Welsh NHS are stolen from a private contractor's computer server (Landauer). The breach happened in October 2016 and the total number of affected staff is 4,766.
Lexington Medical Center
February 17, 2017
•[ hack, healthcare ]
Lexington Medical Center notifies employees of a breach affecting its database.
Citizens Memorial Hospital
February 14, 2017
•[ social, phishing, healthcare ]
Citizens Memorial Hospital employees' data are compromised by a W-2 phishing scam.
Six NHS Websites
February 7, 2017
•[ hack, healthcare ]
The Independent reveals that, over the past six weeks, six NHS websites were defaced showing gruesome images of the conflict in Syria with the hashtags: #Op_Russia and #save_aleppo.
Verity Health System
February 6, 2017
•[ healthcare ]
Verity Health System has now issued a statement about a breach reported to HHS on January 11 as affecting 10,164 patients.
Princeton Pain Management
January 27, 2017
•[ hack, healthcare ]
Princeton Pain Management is notifying 4,668 patients of a hack that was detected on November 28. Although they found no evidence that data were removed from their system, protected health information (PHI) was accessed.
Campbell County Health
January 26, 2017
•[ social, phishing, healthcare ]
Social Security numbers and W-2 information for about 1,400 employees who worked over the past year at Campbell County Health are mistakenly released to someone impersonating a hospital executive.
Sentara Healthcare
January 16, 2017
•[ leak, healthcare ]
A cyber security breach at a third party vendor for Sentara Healthcare compromises the records of over 5,000 patients.
Barts Health Trust
January 16, 2017
•[ hack, healthcare ]
Barts health trust, which runs five hospitals in east London: the Royal London, St Bartholomew's, Whipps Cross, Mile End and Newham, is hit by a cyberattack.
University of Maryland School of Medicine
January 13, 2017
•[ hack, healthcare ]
A doctor's practice plan affiliated with the University of Maryland School of Medicine notifies patients that somebody hacked the account of a physician assistant's email account that contained the personal information of patients. 1500 patients are affected.
Little Red Door Cancer Services of East Central Indiana
January 11, 2017
•[ hack, ransomware, malware ]
The Dark Overlord hacks the computers of an Indiana-based cancer agency and asks for a large payment of 50 Bitcoin ($44,800) not to release the data. Initially the attack seemed to have been caused by ransomware.
Unknown Organization
January 10, 2017
•[ ransomware, malware, healthcare ]
The Susan M. Hughes Center notifies of a ransomware incident affecting 11,400 patients.
Emory Brain Health Center
January 4, 2017
•[ ransomware, malware, healthcare ]
Emory Healthcare is one of the victims of the MongoDB ransomware attacks and has its database, managed by a third-party and containing 90,000 records, encrypted.
Grozio Chirurgija
January 1, 2017
•[ hack, healthcare ]
hacked
Unknown Organization
December 28, 2016
•[ hack, phishing, healthcare ]
Southcentral Foundation (SCF) in Alaska notifies 14,719 individuals after two employees' email accounts containing protected health information were hacked in October.
Quest Diagnostics
November 26, 2016
•[ hack, misconfiguration, healthcare ]
Quest Diagnostics says it is investigating a recent hack that exposed the personal health information of about 34,000 people. An "unauthorized third party" gained access to names, dates of birth, lab results and, in some cases, telephone numbers on Nov. 26 through a mobile health app that gives patients access to lab results and other information.
Vascular Surgical Associates
November 24, 2016
•[ hack, healthcare ]
Vascular Surgical Associates notifies patients of a hack discovered in September when a compromised vendor password was used to access an internal computer.
New Zealand Nurses Organization
November 2, 2016
•[ social, phishing, healthcare ]
New Zealand Nurses Organization notifies 47,000 members of a breach after a spear phishing campaign.
National Health Service's Lincolnshire and Goole
October 30, 2016
•[ hack, malware, healthcare ]
Citing a computer virus outbreak, a hospital system in the United Kingdom cancels all planned operations and diverts major trauma cases to neighboring facilities.
