100,000 patient records exposed, some deleted, in ransomware attack on Arizona clinic  

A January ransomware attack on an Arizona eye clinic encrypted data files on its patient scheduling and billing software and in some cases deleted patient information, according to the clinic’s online breach notice. 

Advertisement

Cochise Eye and Laser, based in Sierra Vista, reported the breach to HHS Feb. 12 as affecting 100,000 individuals. 

In its online statement, the clinic said there is no evidence that patient data was stolen, but it was encrypted and in some cases deleted. As a result, Cochise Eye and Laser is unable to access anything in its scheduling system, so the office is operating with paper charts to continue seeing patients. 

Patient information affected in the breach includes names, dates of birth, addresses and some Social Security numbers. 

The clinic said it is improving security, recovering data and getting a new off-site data backup. All patients seen after Jan. 1 will be called to reschedule follow-up appointments since the clinic lost scheduling information, the clinic said. 

More articles on cybersecurity: 
1 in 5 Americans had a healthcare provider affected by cyberattacks, report finds
5 most common HIPAA violations physicians should watch for
Microsoft warns of Chinese hacking group targeting Exchange email product

Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.