A ransomware attack once again put the personal information of innocent parties at risk after a data breach potentially exposed the medical records of more than 3 million people.
California-based Regal Medical Group announced in December 2022 that malicious hackers obtained information from the company and its affiliates, the Affiliated Doctors of Orange County (ADOC) Medical Group, Greater Covina Medical, and the Lakeside Medical Organization. says it suffered a data breach after accessing
In a notice posted on its website, Regal said an employee first experienced problems accessing its servers on December 2, 2022, and upon further investigation, malware was planted on its servers and data was stolen. I explained that it turned out to be leaked.
The data stolen during the attack was:
- client’s name
- social security number
- address
- date of birth
- telephone number
- Diagnosis and treatment
- Lab test results
- prescription data
- radiation report
- Number of health insurance subscribers
The medical records of 3.3 million people are believed to have been stolen.
Regal Medical Group has taken steps to contact individuals who may have been affected by the breach and has received 1 It says it offers year-round free credit monitoring.
Examples of letters sent to affected individuals have been filed with the California Attorney General’s Office.
What is not publicly disclosed at this time is how the cybercriminals first compromised Regal’s IT infrastructure and the ransomware groups that may have been involved in the attack.
Some ransomware groups have emphasized staying away from attacks against the healthcare industry. One exception is the Hive ransomware group, which recently shut down after its website was forcibly shut down by international anti-crime agencies. The group has revealed that it has helped hundreds of victims decrypt their data for free.
Anyone who may be at risk of having their personal data exposed as a result of an attack should carefully monitor their account statements and credit bureau reports to avoid potential fraudsters who have misused the data. It is wise to be careful when contacted by more plausible.
