As Ascension revealed in breach notification letters sent to affected individuals in April, their information was stolen in a data theft attack that impacted a former business partner in December. While Ascension didn't reveal the total number of affected individuals at the time, an April 29 filing said that the incident impacted 114,692 individuals in Texas, and the company also told Massachusetts' Office of the Attorney General that 96 residents had their medical records and SSNs exposed in the incident. Although Ascension didn't share any details regarding the breach affecting its former business partner, the timeline of the breach implies that the attack was part of widespread Clop ransomware data theft attacks that exploited a zero-day flaw in Cleo secure file transfer software. Last year, Ascension also notified almost 5.6 million patients and employees that their personal, financial, insurance, and health information had been stolen in a May 2024 Black Basta ransomware attack. Ascension, one of the largest private healthcare systems in the United States, has revealed that a data breach disclosed last month affects the personal and healthcare information of over 430,000 patients. Depending on the impacted patient, the attackers could access personal health information related to inpatient visits, including the physician's name, admission and discharge dates, diagnosis and billing codes, medical record number, and insurance company name. However, the healthcare giant also disclosed in an April 28 filing with the U.S. Department of Health & Human Services (HHS) that wasn't published until today that the data breach affected 437,329 individuals. Ascension offers two years of free identity monitoring services to those impacted by this incident, including credit monitoring, fraud consultation, and identity theft restoration. "On December 5, 2024, we learned that Ascension patient information may have been involved in a potential security incident. After the incident, the healthcare organization revealed that the ransomware breach resulted from an employee downloading a malicious file onto a company device. They could also gain access to personal information, including name, address, phone number(s), email address, date of birth, race, gender, and Social Security numbers (SSNs). Ascension also had to pause some non-emergent elective procedures, tests, and appointments and redirect emergency medical services to unaffected healthcare units to prevent triage delays.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Fri, 09 May 2025 18:50:06 +0000