The server was used for radiology patients. Immediately after discovery, Roosevelt General Hospital secured and restored the server. The hospital also took steps to identify any other vulnerabilities that might be present.
Patient data that may have been exposed included names, addresses, dates of birth, driver’s license numbers, Social Security numbers, phone numbers, insurance information, medical information and genders.
While there is no evidence that patient information has been misused, Roosevelt General hospital is recommending patients review their credit reports.
“Although we are continuing our investigation, there is no evidence at this time that any patient data has been wrongfully used,” Roosevelt General Hospital CEO Kaye Green said in a statement, according to ABC 7 Amarillo. “The malware identified on the radiology server was contained and terminated immediately upon detection. This breach did not affect our electronic health record system or billing system.”
More articles on cybersecurity:
Florida clinic to pay $85K for violating HIPAA records access rule
Wyoming hospitals hit by cyberattacks almost daily, state hospital association says
4 things to know about Zeppelin, a ransomware targeting healthcare organizations
