FlagThis

Ascension Health, a major healthcare provider, has confirmed a significant data breach impacting 5.6 million patients following a ransomware attack in May. The attack, attributed to the Black Basta ransomware group, involved the exfiltration of sensitive data including medical records, financial details, insurance information and government IDs, alongside personal identifiers. The cyber incident caused considerable disruption across Ascension's 140 hospitals, impacting critical operations. The breach was discovered May 8th after unauthorized access to systems in February and is considered one of the largest healthcare data breaches of the year.

The exposed data included a variety of sensitive information, including medical record numbers, dates of service, and payment details like credit card and bank account information. Also exposed were Social Security numbers, driver's license numbers, and passport details. While patient data was compromised, the core Electronic Health Records system was not affected. Ascension is offering affected individuals 24 months of credit and CyberScan monitoring, along with a $1,000,000 insurance reimbursement policy and ID theft recovery services.

ImgSrc: mnwa9ap4czgf-u1

References :

• CyberInsider: Ascension Health Ransomware Attack Exposes Data of 5.5 Million People
• Zack Whittaker: Hospital giant Ascension said a May ransomware attack allowed hackers to steal data on 5.6 million patients
• Osint10x: Nearly 6 million people were impacted by ransomware attack on Ascension Health
• techcrunch.com: Ransomware attack on health giant Ascension hits 5.6 million patients
• bsky.app: ​Ascension, one of the largest private U.S. healthcare systems, is notifying over 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation.

Classification:

• HashTags: #BlackBasta #Ransomware #DataBreach
• Company: Ascension Health
• Target: Ascension Health Patients
• Attacker: Black Basta
• Product: Healthcare Data
• Feature: Data Breach
• Malware: Black Basta
• Type: Ransomware
• Severity: Disaster