Massive HSHS Data Breach Exposes 882,782 Patients’ Sensitive Records
Hospital Sisters Health System (HSHS) has suffered a significant cyberattack, leading to the compromise of personal information of 882,782 individuals. The incident, which occurred between August 16 and 27, 2023, was discovered on August 27. The attack was carried out by the LockBit ransomware group.
The breach disrupted various internal systems, including some applications, communications, online payments, and the HSHS website for several days. Exposed information varied by individual and may have included names, addresses, dates of birth, medical record numbers, treatment information, health insurance details, Social Security numbers, and driver's license numbers. HSHS is offering free identity theft protection and credit monitoring to affected individuals as a precautionary measure.
HSHS urges those potentially affected to remain vigilant and take advantage of the offered protection services. The hospital is working with cybersecurity experts to investigate the incident and enhance its security measures to prevent future breaches.