Anna Jaques Hospital, a not-for-profit community hospital in Massachusetts, has confirmed that a ransomware attack it suffered last year has exposed sensitive health data for over 310,000 patients. The breach occurred on December 25, 2023, and the threat actors released all stolen data on January 26.
The forensic investigation into the incident was thorough and lengthy, taking months to complete. The leaked data samples allegedly stolen from Anna Jaques include demographic information, medical records, health insurance details, social security numbers, driver’s license numbers, financial information, and other personal or health-related information.
According to the hospital, there is no indication of any fraud resulting from the incident. However, patients whose information may have been impacted are being notified and offered 24-month-long identity protection and credit monitoring services through Experian and 1B. Patients are advised to review their financial account statements regularly for suspicious activity.
Source: https://www.bleepingcomputer.com/news/security/anna-jaques-hospital-ransomware-breach-exposed-data-of-300k-patients