[BreachExchange] Cyberattack leads to IT outage at Texas cancer clinics, exposing 36, 000

Sophia Kingsbury sophia.kingsbury at riskbasedsecurity.com
Fri Sep 17 09:04:52 EDT 2021


https://www.beckershospitalreview.com/cybersecurity/cyberattack-leads-to-it-outage-at-texas-cancer-clinics-exposing-36-000.html

Austin (Texas) Cancer Centers began notifying 36,503 patients of a data
breach that forced it to shut down its IT networks, according to data
shared with the Maine attorney general's office.

Six things to know:

   - The cancer treatment network discovered Aug. 4 that hackers had
   deployed malware onto its systems, according to an Aug. 27 news release.
   The chain of cancer centers immediately shut down its IT network and law
   enforcement was contacted.
   - Cybersecurity experts determined that hackers were able to stay
   invisible on the system since July 21. Austin Cancer Centers said that for
   security reasons, it took 14 days to identify, uncover and release the
   information. It also required its IT network to remain offline.
   - The organization had to work manually to minimize patient disruption
   while its networks were offline.
   - Austin Cancer Centers said it is unable to confirm if the attack was
   related to ransomware. The cancer center said it will release more
   information at a later time.
   - Exposed information may include Social Security numbers, names,
   addresses, birthdates, credit card numbers and health-related information.
   Its experts worked daily to fully restore its IT systems and restore
   operations, according to an Aug. 27 data breach notification letter.
   - To prevent a similar situation from happening in the future, all
   employees with the Austin Cancer Centers have undergone retraining related
   to this incident. For patients affected, Austin Cancer Centers offers
   online credit monitoring services and fraud insurance with coverage up to
   $1,000,000.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20210917/c9bc0d2e/attachment.html>


More information about the BreachExchange mailing list