400,000 Impacted by CentroMed Data Breach

400,000 Impacted by CentroMed Data Breach

May 23, 2024 at 07:22AM

San Antonio healthcare provider CentroMed is notifying 400,000 patients of a recent cyberattack that compromised personal and health data. The breach, discovered on May 1, exposed names, addresses, medical details, financial information, and Social Security numbers. This is the second attack in a year, with the prior incident affecting 350,000 individuals.

Based on the meeting notes, the San Antonio-based healthcare provider El Centro Del Barrio (CentroMed) has disclosed that 400,000 patients’ personal and protected health information was compromised in a recent cyberattack, which was discovered on May 1, 2024. The unauthorized party accessed and/or acquired files containing a range of information, including names, addresses, dates of birth, medical and health information, insurance information, Social Security numbers, financial account information, and medical claims data.

CentroMed is recommending affected patients to review their healthcare providers’ statements and to contact the relevant provider if they notice any services they did not receive. The organization has initiated the notification process for impacted individuals and has informed the US Department of Health and Human Services (HHS) about the breach.

It’s important to note that this is the second hacking incident for CentroMed in the past year, following an incident in June 2023. Additionally, the cyberattack in 2023 affected the personal information of 350,000 patients, employees, employee spouses, partners, and dependents. The group responsible for the 2023 breach, Karakurt, had claimed the theft of data but did not publicly leak it.

Furthermore, various government agencies had previously issued alerts about Karakurt, warning about its modus operandi of exfiltrating victim data and holding it for ransom without deploying file-encrypting ransomware.

In addition to this incident, the meeting notes also include reference to other healthcare data breaches, underlining the ongoing challenges and risks in the sector.

These conclusions can serve as the key takeaways from the provided meeting notes. Let me know if there are any other specific points or details you’d like to focus on.

Full Article