In January, Randleman Eye Center discovered that malware had encrypted its systems. The malware encrypted a server that stored patients’ protected health information, including names, dates of birth, genders and digital retinal images.
Though the unauthorized third-party was able to encrypt the organization’s systems, Randleman Eye Center said there is no evidence that patient information was removed for the system. There is also no evidence that patient information has been misused.
Since the incident, Randleman Eye Center continues to work with third-party forensic firms to contain the malware. The organization has implemented other security measures to prevent a similar incident from happening again.
More articles on cybersecurity:
State-by-state breakdown of ransomware attacks on healthcare providers
5 recent data breaches caused by human error
Indiana hospital alerts 2,600 patients of human error data breach