Cybersecurity news for hospitals and health systems

Nearly three weeks after experiencing a ransomware attack on its IT network, Indianapolis-based Eskenazi Health is notifying patients that hackers have posted some of the stolen data online. 

More than a thousand web apps that use Microsoft's Power Apps portal service mistakenly exposed millions of records including data from COVID-19 contact-tracing platforms and vaccination sign-ups online, Wired reported Aug. 23. 

Provo, Utah-based Revere Health began notifying about 12,000 patients that their medical records had been exposed in a recent email phishing attack, St. George Spectrum & Daily News reported Aug. 23. 

Sunrise-based South Florida Community Care Plan said it's taking action after discovering a former employee was sending a patient's protected health information to his personal email account.

Atlanta Allergy & Asthma began notifying nearly 10,000 patients Aug. 10 that their protected health information was removed from the clinic's IT network in connection with a January cyberattack. 

There were 1.3 million people affected in a cyberattack on Las Vegas-based University Medical Center, the hospital reported to HHS on Aug. 13.

Early findings from the Cybersecurity and Infrastructure Security Agency link ransomware attacks on hospitals and patient mortality, according to an Aug. 19 report by The Verge. 

More than 1 million St. Joseph's/Candler patients' and employees' personal information was exposed during a ransomware attack on the Savannah, Ga.-based health system in June. 

Marietta, Ohio-based Memorial Health System said its IT systems are still offline after a ransomware attack on Aug. 15.

Savannah, Ga.-based St. Joseph's/Candler has returned to "fully operational" status after discovering a ransomware attack on its IT systems in June, Savannah Morning News reported Aug. 18.