Episource Notifies Patients of Health Data Breach Due to Ransomware Attack
Episource, a company that specializes in developing analytics tools for healthcare providers, has recently started informing patients affected by a health data breach resulting from a ransomware attack that occurred in February. Customer Sharp Healthcare and Sharp Community Medical Group have confirmed that while the incident did not involve unauthorized access to electronic health records or patient portals, patients’ health insurance and health data were compromised.
Key Points:
Episource, a subsidiary of UnitedHealth Group, conducted a forensic investigation which revealed unauthorized access during the ransomware attack earlier this year.
The cybercriminals were able to access patient data from healthcare provider and health plan customers between January 27 and February 6.
Data that may have been compromised includes personal contact information, health insurance plan data, medical diagnoses, test results, images, and other protected patient health information.
Sharp Healthcare confirmed that patient breach notifications are being sent out to individuals affected by the breach.
While the incident did not involve unauthorized access to electronic health records or patient portals, patients’ contact information, health insurance data, and health-related details may have been exposed.
Impact on Healthcare Industry:
The healthcare industry continues to be a target for ransomware attacks, with several incidents reported this year alone.
Threat actors are increasingly targeting healthcare-related businesses that hold valuable patient data, posing a significant risk to the healthcare delivery system.
Ransomware attacks on providers can result in significant financial losses, with downtime costs reaching up to $900,000 per day.
Conclusion:
Healthcare organizations must remain vigilant in safeguarding patient data and implementing robust cybersecurity measures to prevent future breaches.
Andrea Fox is a senior editor of Healthcare IT News. For inquiries, email: afox@himss.org
Healthcare IT News is a HIMSS Media publication.
