A ransomware attack on the healthcare administrative-service provider CaptureRx has exposed patient information from multiple provider systems.
According to reporting from
HIPAA Journal, tens of thousands of patients from at least five health systems had their data stolen in the incident.
"The investigation determined that, at the time of the incident, the relevant files contained first name, last name, date of birth, and prescription information," said CaptureRx in a press statement.
WHY IT MATTERS
On February 6, attackers gained access to and acquired files that CaptureRx had received from healthcare providers.
From February 19 through March 19, CaptureRx began reviewing the contents of the files to confirm the scope of affected individuals and associated covered entities. On March 30, it began notifying healthcare providers of the incident.