Anna Jaques Hospital has notified over 316,000 individuals that their personal information was compromised in a December 2023 data breach. The incident was initially identified on Christmas Day last year and resulted in the hospital diverting patients from its emergency rooms due to a shutdown of its health record system.
The threat actor behind the breach, Money Message, claimed to have stolen 600 gigabytes of data, which was made available for download days later. In an initial notice on January 23, Anna Jaques revealed that personally identifiable information and medical insurance details were likely compromised in the attack.
However, an updated notice released on December 5 indicates that financial information might also have been exfiltrated. The hospital’s forensic investigation and manual document review of the stolen data was completed in November.
The affected individuals may include demographic information, medical records, Social Security numbers, driver’s license numbers, and financial details. Anna Jaques is providing two years of free identity theft and credit monitoring services to those potentially impacted by the incident.
The hospital advises its employees and patients to remain vigilant when reviewing financial account statements for any fraudulent activity and to review explanation of benefits statements from health insurance providers. Located in Massachusetts, Anna Jaques is a not-for-profit community hospital providing primary care and other healthcare services to the surrounding areas.
Source: https://www.securityweek.com/anna-jaques-hospital-data-breach-impacts-316000-people