Cybersecurity Update
HIPAA & Cybersecurity Updates - Ballad Health of Johnson City, TN, reported that an employee, without patient’s permission, posted photo of a surgery, where surgeon was wearing a racing helmet.
- The City of Atlanta, GA admitted that after it was hit by ransomware, the first month of recovery cost almost $3 million. The ransom demand from hackers, which was not paid, was $50,000.
- Clearwater River Casino & Lodge in Lewiston, Idaho notified an unknown number of employees and customers that it was hit by ransomware.
- Ye-Ye Casino in Kamiah, Idaho notified an unknown number of employees and customers that it was hit by ransomware.
- OSF Healthcare of Peoria, IL notified an unknown number of patients that their PHI was exposed after cyber security incident.
- Newhall School District of southern California notified an unknown number of students that their info was exposed after ransomware attack.
- Yorktown Public School District of Westchester, NY notified an unknown number of students that their info was exposed after ransomware attack.
- Croton-Harmon Public School District of Westchester, NY notified an unknown number of students that their info was exposed after ransomware attack.
- Glow Inc. of San Francisco, CA notified an unknown number of its fertility app
customer/patients that their info was exposed after cyber incident.
- Broadvoice, headquartered in Northridge, CA, notified its customers that 350 million voice mails with confidential info, including PHI, was exposed after cyber incident.
- SoutheastHEALTH of Missouri notified an unknown number of patients that their PHI may have been exposed after cyber security incident.
- Bozeman Deaconess Hospital of Montana notified an unknown number of patients that their PHI may have been exposed after a former security guard was caught stealing computer hardware.
- The ransomware hacking group known as “The Darkside”, announced that it is taking part of the ransom it collects and donates it to charities, including Children International and The Water Project.
o The charities are not allowed to keep the donations, as they are seized due to illegal nature of the funds.
- The Wall Street Journal ran an article entitled; “Hackers Smell Blood As Schools Grapple With Virtual Instruction”, detailing how school districts are being hit by ransomware.
- Passavant Memorial Homes Family of Services of Warrendale, PA notified an unknown number of patients that their PHI was exposed after cyber incident.
- Dickinson County Healthcare System of Iron Mountain, MI notified an unknown number of patients that their PHI was exposed after ransomware attack.
- Pfizer Pharmaceuticals, headquartered in New York City, NY, notified “hundreds” of patients that their PHI was exposed after cybersecurity incident.
- The City of Shafter, CA notified an unknown number of citizens that their info was exposed after ransomware attack.
- K12 Inc. of Herndon, VA notified 1600 students in Missouri that it inadvertently exposed their info after a spreadsheet was illegally shared with lobbyists.
- A federal grand jury in Pittsburg, PA indicted 6 hackers from Russia with an attack on Heritage Valley Health System of Beaver, PA, including:
o Yuriy Sergeyevich Andrienko
o Sergey Vladimirovich Detistov
o Pavsi Valeryevich Frolov
o Petr Nikolayevich Pliskin
- Blackbaud, a company that stores donor information for health systems, published list of all of its customers that had PHI exposed as a result of a breach. The list shows name of healthcare system and the number of patients involved if available:
o Geisinger (Danville, Pa.): 86,412
o Stamford (Conn.) Hospital: 1,050
o Lawrence + Memorial Hospital (New London, Conn.): 21,617
o The Medical College of Wisconsin (Milwaukee): 5,655
o Froedtert & the Medical College of Wisconsin Community Physicians
(Milwaukee): 3,074
o Sisters of Charity of St. Augustine Health System (Cleveland): 118,874
o North Memorial Health (Robbinsdale, Minn.): 21,236
o Scottish Rite for Children (Dallas): 3,414
o MedStar Health (Columbia, Md.): 668
o Nuvance Health (Danbury, Conn.): 314,829
o Gillette Children's Specialty Healthcare (St. Paul, Minn.): 1,766
o University of Tennessee Medical Center (Knoxville): 234,954
o Connecticut Children's Medical Center (Hartford): 2,633
o Mount Sinai Health System (New York City): 87,535
o Allina Health (Minneapolis): 199,389
o Community Health Network (Indianapolis): 81,118
o Medical University of South Carolina (Charleston): 54,869
o SCL Health (Broomfield, Colo.): 343,493
o OSF HealthCare (Peoria, Ill.): Not available
o The Christ Hospital Health Network (Cincinnati)
o UMass Memorial Medical Center (Worcester, Mass.)
o Vidant Health (Greenville, N.C.)
o Texas Children's Hospital (Houston)
o ChristianaCare (Newark, Del.)
o Trinity Health (Livonia, Mich.)
o Montefiore Medical Center (New York City)
o Catholic Medical Center (Manchester, N.H.)
o Memorial Sloan Kettering Cancer Center (New York City)
o Atrium Health (Charlotte, N.C.)
o Catholic Health (Buffalo, N.Y.)
o MultiCare Health System (Tacoma, Wash.)
o Northern Light Health Foundation (Brewer, Maine)
o NorthShore University HealthSystem (Evanston, Ill.)
o Northwestern Memorial HealthCare (Chicago)
o Saint Luke's Health System (Kansas City, Mo.)
o Spectrum Health (Grand Rapids, Mich.)
o UF Health (Gainesville, Fla.)
o UK HealthCare (Lexington, Ky.)
o UT Health San Antonio
o Inova Health System (Falls Church, Va.)
o Children's Minnesota (Minneapolis)
o Lehigh Valley Health Network (Allentown, Pa.)
o Riverside Health System (Newport News, Va.)
o Our Lady of the Lake (Baton Rouge, La.)
o UnityPoint Health (West Des Moines, Iowa)
o Adventist HealthCare (Gaithersburg, Md.)