Current:Home > MarketsHCA Healthcare says hackers stole data on 11 million patients -CapitalCourse
HCA Healthcare says hackers stole data on 11 million patients
View
Date:2025-04-16 01:34:38
Hospital and clinic operator HCA Healthcare said it has suffered a major hack that risks the data of at least 11 million patients.
Patients in 20 states, including California, Florida, Georgia and Texas, are affected, the Nashville-based chain said on Monday. The data accessed includes potentially sensitive information such as the patients' names, partial addresses, contact information and upcoming appointment date.
The breach, which the company learned about on July 5, is one of the biggest health care breaches in history.
The hackers accessed the following information, according to HCA Healthcare:
- Patient name, city, state, and zip code
- Patient email, telephone number, date of birth, gender
- Patient service date, location and next appointment date
"This appears to be a theft from an external storage location exclusively used to automate the formatting of email messages," the company said in its Monday announcement.
"The company disabled user access to the storage location as an immediate containment measure and plans to contact any impacted patients to provide additional information and support, in accordance with its legal and regulatory obligations, and will offer credit monitoring and identity protection services, where appropriate," it said.
If 11 million patients are affected, the breach would rank in the top five health care hacks reported to the Department of Health and Human Services Office of Civil Rights, according to the Associated Press. The worst such hack, a 2015 breach of the medical insurer Anthem, affected 79 million people. Chinese spies were indicted in that case, and there is no evidence the stolen data was ever put up for sale.
The suspected HCA hacker, who first posted a sample of stolen data online on July 5, was trying to sell the data and apparently trying to extort HCA, the AP reported. The hacker, who claimed to have 27.7 million records, then dumped a file online on Monday that included nearly 1 million records from the company's San Antonio division.
Call before paying an HCA bill
HCA is asking patients not to pay any invoices or billing requests without first calling the chain at (844) 608-1803 to verify that the message is legitimate.
HCA added that it "reported this event to law enforcement and retained third-party forensic and threat intelligence advisors." It also claimed that the breach, which revealed at least 27 million rows of data on about 11 million patients, didn't include potentially sensitive information, including patients' treatment or diagnosis; payment information, passwords, driver's license numbers or Social Security numbers.
DataBreaches.net, which first reported on the hack, posted a sample of code purportedly offered by a hacker containing the sentence, "Following up about your lung cancer assessment" as well as a client ID.
However, an HCA spokesperson told CBS MoneyWatch that the code in question was an email template developed by the company, while the client ID referred to a doctor's office or facility, not a patient.
HCA claimed that it "has not identified evidence of any malicious activity on HCA Healthcare networks or systems related to this incident. The company disabled user access to the storage location as an immediate containment measure and plans to contact any impacted patients to provide additional information and support, in accordance with its legal and regulatory obligations, and will offer credit monitoring and identity protection services, where appropriate."
HCA operates more than 180 hospitals and 2,000 care locations, such as walk-in clinics, across 20 states and the U.K., according to the company's website.
- In:
- Data Breach
veryGood! (9)
Related
- FACT FOCUS: Inspector general’s Jan. 6 report misrepresented as proof of FBI setup
- Former US Sen. Joe Lieberman and VP candidate to be remembered at hometown funeral service
- Jon Scheyer's Duke team must get down in the muck to stand a chance vs. Houston
- In 2019, there were hundreds of endangered earless dragons in Australia. This year, scientists counted just 11.
- Dick Vitale announces he is cancer free: 'Santa Claus came early'
- Men's March Madness highlights: Thursday's Sweet 16 scores, best NCAA Tournament moments
- Gypsy Rose Blanchard and Husband Ryan Anderson Break Up 3 Months After Her Prison Release
- New Hampshire House takes on artificial intelligence in political advertising
- 'Squid Game' without subtitles? Duolingo, Netflix encourage fans to learn Korean
- Biden says he’s working to secure release of Wall Street Journal reporter held for a year in Russia
Ranking
- The Grammy nominee you need to hear: Esperanza Spalding
- Takeaways: AP investigation reveals Black people bear disproportionate impact of police force
- The Bachelor's Kelsey Anderson Explains How That Limo Moment Went Down
- Michael Jackson's children Prince, Paris and Bigi Jackson make rare appearance together
- North Carolina trustees approve Bill Belichick’s deal ahead of introductory news conference
- Are these killer whales actually two separate species? New research calls for distinction
- How Beyoncé and Jay-Z’s 6-Year-Old Daughter Rumi Appears in Cowboy Carter
- Top 2024 NFL Draft prospect Jayden Daniels' elbow is freaking the internet out
Recommendation
Federal court filings allege official committed perjury in lawsuit tied to Louisiana grain terminal
Sam Bankman-Fried sentenced to 25 years in prison for his role in collapse of FTX crypto exchange
Sam Bankman-Fried sentenced to 25 years in prison for his role in collapse of FTX crypto exchange
The Hedge Fund Manager's Path to Financial Freedom in Retirement: An Interview with John Harrison
Could Bill Belichick, Robert Kraft reunite? Maybe in Pro Football Hall of Fame's 2026 class
Funniest misheard Beyoncé lyrics, from 'Singing lettuce' to 'No bottom knee'
John Harrison: The truth behind the four consecutive kills in the Vietnamese market
Is the stock market open or closed on Good Friday 2024? See full holiday schedule
Like
- FACT FOCUS: Inspector general’s Jan. 6 report misrepresented as proof of FBI setup
- NOAA warns boaters to steer clear of 11 shipwrecks, including WWII minesweeper, in marine sanctuary east of Boston
- The Most-Shopped Celeb Recommendations This Month: Jennifer Lopez, Kyle Richards, Chrishell Stause & More