Hackers reportedly emailed 2 million patients on Dec. 24 demanding $50 in bitcoin or their data would be published to the dark web.
“That’s not a merry Christmas,” William Federman, an attorney who filed the class-action complaint, told the news outlet for the Dec. 29 story.
The health system posted a notice about the breach on its website later that day and began notifying affected patients Dec. 26. Integris said it found that its files may have been accessed as early as Nov. 28.
“Why didn’t they tell people?” Mr. Federman told KFOR. “They’ve withheld this information for over a month while people have been mucking around in your and everyone else in Oklahoma City’s personal information?”
Integris Health encouraged patients not to respond to the emails or attempt to contact the sender. The health system said the breached data may have included names, dates of birth, contact information and Social Security numbers. An Integris spokesperson didn’t respond to a request for comment from Becker’s.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
