Upon discovering the keylogger virus, Institute for Women’s Health officials worked to remove it from network computers and terminal servers. Officials said the virus was completed removed by July 13. A subsequent investigation confirmed the virus was installed June 5.
The keylogger virus may have captured information from patients who paid for services with a credit or debit card from June 5 to July 11. Affected information might have included names, addresses, dates of birth and Social Security numbers, among other information typed into the system.
Officials reported 15,761 individuals were affected in the incident, according to an Aug. 18 submission to HHS’ Office for Civil Rights breach portal.
Institute for Women’s Health officials have offered affected patients identity theft protection services such as one year of credit monitoring, a $1,000,000 insurance reimbursement policy and identity theft recovery services.
Editor’s note: Becker’s Hospital Review reached out to Institute for Women’s Health for comment and will update as more information becomes available.
More articles on cybersecurity:
Florida surgery center reports 33k patients impacted in ransomware attack
Salina Family Healthcare Center updates ransomware notice after delivery mixup
Philips to update radiation application after discovering security vulnerability
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.