
Ascension, a major US hospital operator, has disclosed that a ransomware attack in May 2024 has affected approximately 5.6 million patients and staff. The attack disrupted clinical operations and involved the theft of sensitive personal and health data. Ascension operates 140 hospitals and 40 senior care facilities across the United States, generating $28.3 billion in revenue in 2023. The organization has begun notifying impacted individuals through letters, explaining that the breach was initiated when an employee inadvertently downloaded a malicious file onto a company device. The notification comes several months after the initial attack, which has raised concerns regarding the timeliness of the communication to those affected.
Ascension mailed a letter to impacted patients & employees to notify them. They said that the ransomware breach was caused by an employee who downloaded a "malicious file onto a company device" by mistake or unknowingly. https://t.co/L6ZCWA2Qra
Ascension operates 140 hospitals & 40 senior care facilities across the US. $28.3B in revenue in '23. They were victims of a cyberattack in May & are just now notifying ∼5.6M patients & employees that their personal & health data was stolen h/t @Techmeme https://t.co/u3u9VkxmCR
Hospital operator Ascension told Maine's state attorney general that nearly 5.6 million people were affected in a ransomware attack that hit it earlier this year https://t.co/E3Yy5IGq7k https://t.co/Xcup9fuZOG