The Clop ransomware group was responsible for the attack. The data breach, which occurred between May 28 and May 29, affected 1.2 million patients, according to a filing with the U.S. Department of Health and Human Services.
The 13 healthcare clients affected by the breach:
- Charlotte, N.C.-based Atrium Health
- Hickory, N.C.-based Catawba Valley Medical Center
- Charlotte (N.C.) Radiology
- Durham, N.C.-based Duke University Health System
- Sanford, N.C.-based DLP Central Carolina Medical Center
- Greenville, N.C.-based ECU Health
- Pinehurst, N.C.-based FirstHealth of the Carolinas
- Asheville, N.C.-based Mission Health System
- Winston-Salem, N.C.-based Novant Health
- Wilmington, N.C.-based Novant Health New Hanover Regional Medical Center
- Chapel Hill, N.C.-based UNC Health
- Raleigh, N.C.-based Wake Radiology Diagnostic Imaging
- Raleigh, N.C.-based WakeMed Health & Hospitals
Boise, Idaho-based St. Luke’s Health System was also affected by the breach but chose to issue its own notification.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.