Apple Valley reported the incident to HHS March 26 as affecting 157,939 individuals. The clinic said it was notified by its vendor Netgain in December that the company’s systems had been compromised by a cyberattack. Tacoma, Wash.-based MultiCare, which also works with Netgain, was also affected by the ransomware attack, which exposed the personal information of 210,000 patients, providers and workers.
Once Netgain’s systems were restored, Allina Health received confirmation Jan. 29 that patient data had been affected by the attack. Patient information exposed by the incident includes names, birthdates, Social Security numbers, bank account and routing numbers, patient billing information, and medical information, according to the March 26 news release.
Only patients who receive care at Apple Valley were affected by the incident; no other Allina Health locations were involved. While Apple Valley was not targeted in the attack, the clinic implemented Allina Health’s EHR system in February and began moving to a new IT system, also used by Allina Health, to increase its cybersecurity protocols.
Apple Valley is offering free identity theft protection services to any patients affected by the breach.
More articles on cybersecurity:
FBI warns of Mamba ransomware campaign: 10 tips to protect your hospital
Laptop with patient database stolen from Atlanta clinic
Wake Forest Baptist hospital patients’ records exposed in Healthgrades data breac
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit