Ascension Ransomware Attack: 5.6 Million Patients Affected

Ascension Healthcare Data Breach: 5.6 Million Patients Affected

A significant ransomware incident targeting Ascension, a major U.S. healthcare provider operating over 140 hospitals and numerous senior care centers, resulted in the compromise of personal and confidential health data belonging to 5.6 million individuals. This information was reportedly accessed by malicious actors, as detailed in a recent notification to Maine’s attorney general.

The cyberattack instigated substantial operational challenges throughout Ascension’s network of facilities. Reports from staff members indicate critical disruptions in patient care, encompassing delays in receiving lab results and instances of medication errors.

Details of the Attack and Data Compromised

The Black Basta ransomware group has been identified as the perpetrator behind this breach. They successfully exfiltrated a wide range of patient data.

Stolen information included details regarding medical services received, such as dates of service, lab test results, and procedure codes. Financial data, encompassing credit card details and bank account numbers, was also compromised.

Furthermore, a substantial amount of personally identifiable information (PII) was accessed, including patient names, residential addresses, and dates of birth.

The attackers also obtained copies of sensitive identity documents belonging to patients, such as driver’s licenses and passports.

Breach Ranking and Impact

According to records maintained by the Department of Health and Human Services (HHS) regarding data breach investigations, the Ascension attack currently stands as the third-largest healthcare-related data breach reported in 2024.

This incident underscores the growing threat landscape facing healthcare organizations and the critical need for robust cybersecurity measures to protect sensitive patient information.