Entry to Sandhills Medical Basis affected person info throughout a cyberattack
FROM STAFF REPORTS
A cyberattack focusing on a supplier utilized by a Sumter-based medical heart affected sufferers’ private info, officers mentioned.
The supplier supplied cloud storage for apply administration and reporting techniques to Sandhills Medical Basis Inc. The medical supplier knowledgeable sufferers of the supplier’s ransomware assault on Friday.
Daniel Roberts mentioned in an announcement Friday that the vendor knowledgeable Sandhills on Jan. 8 of the assault. Based on the seller’s investigation, the attackers used compromised credentials to achieve entry to their system on September 23, 2020. The attackers accessed Sandhills techniques on November 15, 2020 and took the information from Sandhills earlier than the ransomware assault was launched on December 3. , 2020.
The seller reported the assault to regulation enforcement and employed a cybersecurity firm to analyze and reply. The seller paid the attackers to return the information and was assured that copies of the information had been deleted / destroyed. For the reason that assault, the vendor has carried out further safety measures.
Sandhills decided that affected person medical data, lab outcomes and medicines, in addition to bank card and checking account numbers, have been unaffected. The knowledge affected included affected person names, dates of delivery, postal and e-mail addresses, driver’s licenses and social safety numbers, in addition to claims info, which might be used to find out diagnoses / circumstances.
Sandhills notified federal and state businesses and nationwide credit score bureaus of the violation. As well as, Sandhills affords one yr of free credit score monitoring and identification theft safety to all affected sufferers.
For questions on how one can register without cost credit score monitoring and identification theft safety companies, affected sufferers ought to name 1-888-236-0854. To talk instantly with Sandhills’ Compliance Officer relating to this incident, sufferers ought to name 1-800-688-5525.