A company executive was tricked by a phishing email in September into giving up his or her email account credentials to a hacker. That hacker then forwarded 124 company emails to an external account. Some of the compromised emails contained protected health information.
The outpatient palliative care company said the illicit email originated from a website with an Eastern European IP address that lists Google as the registrar. Aspire sought voluntary help from Google to identify the hacker, but Google refused and told Aspire it would need a subpoena, which Aspire filed for Sept. 25.
After Aspire’s own investigation found that the stolen emails were never opened, the company said it is ending its legal effort to identify the hacker. Aspire dismissed its court motion to subpoena Google in late November, according to the Tennessean.
More articles on cybersecurity:
Colorado hospital to pay $111K HIPAA settlement
University of Maryland Medical System investigates malware attack
Cloud is getting easier to breach, researchers say
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.