Medical Ransomware Attack May Have Affected 500,000 Patients, North Florida OB-GYN Says

A Florida clinic recently informed its current and former patients that a medical ransomware attack may have exposed medical records and personal information.

North Florida OB-GYN, part of Women’s Care Florida, says that on July 27, it became aware of a cyber attack against its network via medical ransomware. The medical practice believes the breach occurred on or before April 29 and potentially affected a total of 528,188 patients, all of whom were sent a letter about the breach and the risk to personal data.

The clinic also released a statementon its website about its initial steps after discovering the attack, reading in part: “Shortly after becoming aware of the incident, North Florida OB-GYN completed a preliminary assessment, in consultation with third-party information technology consultants, and determined that there had been improper access to certain portions of its networked computer systems and that a computer virus had encrypted (made unreadable) certain files on its computer systems.”

Due to the results of the assessment, the clinic shut down its networked computer systems; began its response and recovery procedures; notified the Federal Bureau of Investigation (FBI); and launched a confidential investigation.

A slew of patient information may have been exposed, including:

• Name
• Demographic information
• Date of birth
• Social Security number
• Driver’s license or ID card number
• Employment information
• Health insurance information
• Medical information (treatment, diagnosis, images, related information)

The clinic notes that the computer systems affected by the breach did not contain patient credit or debit card or financial account information.

The statement on the clinic’s website also notes that while this information was affected in the ransomware attack (that is, encrypted) “There is no evidence to date that any unauthorized person has actually viewed, retrieved, or copied any medical or personal information.” However, the clinic has advised its patients to keep an eye on their account statements and credit reports, and report any discrepancies or suspicious activity to their financial institutions.

North Florida OB-GYN reports that nearly all of its files that were encrypted in the attack have been recovered, and says it is strengthening security systems to prevent future incidents.

Ransomware attacks have become increasingly common in recent years, targeting hospitals, schools, and cities—in short, anywhere that might have large databases of personal information, according to CBS News.

While these attacks can expose personal patient information, they can also result in necessary patient care being delayed, potentially putting patients’ lives at risk.

If you were a patient at a hospital, clinic, or other healthcare facility and a medical ransomware attack affected your medical care, you may be able to join a class action lawsuit investigation.

Join a Free Hospital Ransomware Attack Class Action Lawsuit Investigation

If you were a patient at a hospital or healthcare facility affected by a ransomware attack that impacted your medical care, you may qualify to join a hospital ransomware attack class action lawsuit investigation.

Learn More

This article is not legal advice. It is presented
for informational purposes only.