A digital extortion group known as ShinyHunters claims to have stolen 8.8 terabytes of data from Amazon One Medical’s senior care business, BankInfoSecurity reported June 19.
The group is threatening to release the data publicly. In a June 18 post on its leak site, ShinyHunters warned One Medical that it would publish the allegedly stolen information “along with several annoying digital problems that’ll come your way” unless the company responded by June 22. The group did not specify its demands in the post.
One Medical disclosed June 17 that it learned on June 13 of unauthorized access to a third-party file storage system used to retain archived information from Iora Health, a primary care company it acquired in 2021. Iora Health now operates as One Medical Senior Health.
The company did not mention ShinyHunters in its breach notification. When asked about the group’s claims, a One Medical spokesperson referred Becker’s to the company’s previously issued statement and security event notice.
According to the notice, One Medical has deactivated the affected system, revoked access and launched an investigation. The potentially compromised information includes demographic and clinical records for some patients at designated One Medical Seniors clinics in Atlanta; Cape Cod, Mass.; Charlotte, N.C.; the Piedmont Triad region of North Carolina; Denver; Houston; Phoenix; Tucson, Ariz.; and Seattle.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
