- Community Health Center confirms that the suffering of a data violation
- The criminals stole sensitive information about more than one million people
- This was not a ransomware -attack, CHC claims
More than a million people may have had their sensitive information stolen after a “skilled hacker” broke into the IT system of the Community Health Center (CHC).
The company submitted a new report to the Maine Office of the Attorney General, who said it discovered “unusual activity” in its computer systems on January 2nd.
“The same day we brought in experts to investigate and strengthen the safety of our system. They found that a skilled criminal hacker came into our system and took some data that could include your personal information. “
No ransomware
The data stolen in this attack includes people’s names, birth dates, addresses, phone numbers, e emails, diagnoses, treatment details, test results, social security numbers and health insurance information – all is more than enough to run very personal phishing attacks, and maybe Even thread fraud.
CHC is a Connecticut-based nonprofit health provider that offers extensive primary care, dentist, behavioral health and special services for undervalued societies.
This does not seem to have been a ransomware attack when CHC added that the actors did not delete or locked any of the data affected. Therefore, the attack did not affect its daily operations, it added.
“We think we stopped the criminal hacker’s access within hours and that there is no current threat to our systems.”
CHC is now announcing affected persons about violation and offering help, including free protection of identity theft through IDX. In the letter, CHC said IDX will provide 24 months credit and cybercan monitoring. Furthermore, the company set aside a refund policy of $ 1M and promised to help recover stolen identities.
In recent months, ransomware groups have begun to move away from encrypters and focus only on data theft. Apparently, it is just as effective in terms of ransom, but still cheaper and easier to withdraw. It seems that CHC in this case was not asked for a ransom yet.
Via Techcrunch
