[BreachExchange] Cyberattack leads to IT outage at Texas cancer clinics, exposing 36, 000
Sophia Kingsbury
sophia.kingsbury at riskbasedsecurity.com
Fri Sep 17 09:04:52 EDT 2021
https://www.beckershospitalreview.com/cybersecurity/cyberattack-leads-to-it-outage-at-texas-cancer-clinics-exposing-36-000.html
Austin (Texas) Cancer Centers began notifying 36,503 patients of a data
breach that forced it to shut down its IT networks, according to data
shared with the Maine attorney general's office.
Six things to know:
- The cancer treatment network discovered Aug. 4 that hackers had
deployed malware onto its systems, according to an Aug. 27 news release.
The chain of cancer centers immediately shut down its IT network and law
enforcement was contacted.
- Cybersecurity experts determined that hackers were able to stay
invisible on the system since July 21. Austin Cancer Centers said that for
security reasons, it took 14 days to identify, uncover and release the
information. It also required its IT network to remain offline.
- The organization had to work manually to minimize patient disruption
while its networks were offline.
- Austin Cancer Centers said it is unable to confirm if the attack was
related to ransomware. The cancer center said it will release more
information at a later time.
- Exposed information may include Social Security numbers, names,
addresses, birthdates, credit card numbers and health-related information.
Its experts worked daily to fully restore its IT systems and restore
operations, according to an Aug. 27 data breach notification letter.
- To prevent a similar situation from happening in the future, all
employees with the Austin Cancer Centers have undergone retraining related
to this incident. For patients affected, Austin Cancer Centers offers
online credit monitoring services and fraud insurance with coverage up to
$1,000,000.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20210917/c9bc0d2e/attachment.html>
More information about the BreachExchange
mailing list