- Frederick Health Medical Group was beaten with ransomware at the end of January 2025
- It completed its study and says that nearly a million people lost sensitive data
- The data includes names, SSNs, information about health insurance and more
We now know how many people are affected by a recent ransomware attack on Frederick Health Medical Group – almost a million.
The health provider reported the new figures to the US Ministry of Health and Human Services (HHS), where he noticed how on January 27, 2025, a “ransomware event” experienced on the IT systems.
The information taken varies from person to person, Frederick Health Medical Group added, and while in the announcement they do not discuss the number of persons affected, they shared a figure with US HHS – 934,326 individuals.
Other increase
The subsequent study determined that the threat actors managed to steal certain files from a File Share server.
These files included patient names, addresses, birth dates, social security number, driver’s license numbers, the number of medical registration, information on health insurance and/or clinical information related to patient care.
So far, no threat players have taken on the responsibility for the attack, and the data has not yet appeared on the dark web, which may have suggested that Frederick Health was actually paid the demand for ransom.
The organization has approx. 4,000 employees and more than 25 locations. To mitigate the risk of the attack, it also offered all affected persons free credit monitoring and identity theft -protection services through IDX.
Health organizations are a primary measure of ransomware operators considering the sensitivity of the data they operate with. In April 2025 alone, we had stories of a cybersecurity CEO that tried to install malware on the hospital’s computers, attacks on Yale Health and Davita and the Data Cover on Logezy.
In addition, Blue Shield of California also recently revealed a data violation that exposed sensitive data of 4.7 million members.
Via Bleeping computer