Current:Home > MarketsHackers had access to patient information for months in New York hospital cyberattack, officials say-Angel Dreamer Wealth Society D1 Reviews & Insights
Hackers had access to patient information for months in New York hospital cyberattack, officials say
View Date:2024-12-23 21:11:26
A group of New York hospitals and health care centers were targeted in a cyberattack that for two months allowed hackers to access patients' private information, officials said this week. The attack targeted three separate facilities in the Hudson Valley — HealthAlliance Hospital, Margaretville Hospital and Mountainside Residential Care Center — which all operate under the same parent company and within the hospital conglomerate Westchester Medical Center Health Network.
HealthAlliance, Inc., the corporate parent of the three facilities, said Monday that it "began mailing notification letters to patients whose information may have been involved in a data security incident." The security issue was acknowledged publicly in October by the broader Westchester health network, but few details were released about the nature or the extent of the breach as an investigation got underway. Now, officials say the probe involving the New York State Department of Health, local authorities in the Hudson Valley, the FBI and a third-party cybersecurity firm determined that hackers were able to access the parent company's information technology network from Aug. 18 to Oct. 13.
"While in our IT network, the unauthorized party accessed and acquired files that contain patient information," HealthAlliance said in a statement. "The information involved varied by patient, but may have included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and other treatment information, health insurance information, provider names, dates of treatment, and/or financial information."
The company said it will offer free credit monitoring services and identity theft protection services to patients whose Social Security numbers were potentially stolen. It has also put in place "additional safeguards and technical security measures." A dedicated call center has been set up for patients to contact HealthAlliance with questions.
CBS News contacted Westchester Medical Center Health Network for more information but did not receive an immediate response.
The health network first warned that some of its facilities were facing a "potential cybersecurity threat and an IT system outage" on Oct. 16, it said in a statement at the time.
Patient care had not yet been impacted, the statement said. But, by Oct. 19, a planned shutdown of the connected IT systems used by all three affected facilities forced emergency medical services crews to divert ambulances from HealthAlliance Hospital and decide whether to discharge admitted patients or transfer them to other hospitals within the Westchester network. Those changes were in effect for several days as the temporary shutdown went ahead, followed by a staged reboot that lasted into the weekend.
Both HealthAlliance Hospital and Margaretville Hospital continued to accept walk-in patients, and officials said at the time they would be "treated, assessed and either released, or stabilized and transferred to other WMCHealth facilities." HealthAlliance said the facilities were "fully operational" by the evening of Oct. 21, although emergency stroke patients still needed to be treated elsewhere.
The cyberattack that targeted HealthAlliance was one of a growing number of cyber threats impacting hospitals and health care centers across the United States, potentially opening up patients' private data to bad actors and interrupting or threatening their quality of medical care. At least 299 hospitals have experienced ransomware attacks in 2023, according to the Institute for Security and Technology.
One attack last month targeted a large health care conglomerate, the Tennessee-based Ardent Health Services. The attack affected 30 hospitals and more than 200 health care sites across six states. The company said it became aware of the breach on Thanksgiving day.
Because of the breach, a patient scheduled to undergo a heart procedure at an affected health care site in Oklahoma and another scheduled for an annual cancer check at an affected site in Kansas both told CBS News their appointments were suddenly postponed or canceled entirely.
In New Jersey last month, two hospitals were forced to divert patients headed to their emergency rooms to other facilities, CBS New York reported. Hospital officials said at the time that patient care was not affected, but Jack Danahy, a cybersecurity expert, told CBS New York that cyberattacks like that one "can have a material effect on the provision of care," adding, "We know with the case of earlier attacks, it can take weeks or months for those systems to come back online."
—Nicole Sganga contributed reporting.
- In:
- Health
- Cyberattack
- Crime
- New York
Emily Mae Czachor is a reporter and news editor at CBSNews.com. She covers breaking news, often focusing on crime and extreme weather. Emily Mae has previously written for outlets including the Los Angeles Times, BuzzFeed and Newsweek.
Twitter InstagramveryGood! (71)
Related
- Lions find way to win, Bears in tough spot: Best (and worst) from NFL Week 10
- LGBTQ+ hotlines experience influx in crisis calls amid 2024 presidential election
- Frustrated Americans await the economic changes they voted for with Trump
- Bill Self matches Phog Allen for most wins at Kansas as No. 1 Jayhawks take down No. 10 UNC
- How Alex Jones’ Infowars wound up in the hands of The Onion
- A Timeline of Brianna Chickenfry LaPaglia and Zach Bryan's Breakup Drama
- Community grieves 10-year-old student hit and killed by school bus in Missouri
- Real Housewives of Atlanta Star Porsha Williams Influenced Me to Buy 50 These Products
- Taylor Swift Becomes Auntie Tay In Sweet Photo With Fellow Chiefs WAG Chariah Gordon's Daughter
- 'I hope nobody got killed': Watch as boat flies through air at dock in Key Largo, Florida
Ranking
- Jessica Simpson’s Sister Ashlee Simpson Addresses Eric Johnson Breakup Speculation
- Nicole Scherzinger Apologizes for Hurt Caused by Controversial Instagram Comment
- SEC showdowns with CFP implications lead college football games to watch in Week 11
- 3 arrested on charges of elder abuse, Medicaid fraud in separate Arkansas cases
- New York eyes reviving congestion pricing toll before Trump takes office
- Yellowstone Cast Reveals “Challenging” Series End Without Kevin Costner
- Officials say 1 of several New Jersey wildfires threatens 55 structures; no evacuations ordered
- Chappell Roan Is Up For 6 Grammy Nominations—and These Facts Prove She’s Nothing Short of a Feminomenon
Recommendation
-
Today Reveals Hoda Kotb's Replacement
-
Abortion-rights groups see mixed success in races for state supreme court seats
-
NFL Week 10 bold predictions: Which players, teams will turn heads?
-
13 Holiday Gifts for Men That Will Make Them Say 'Wow'
-
Judge hears case over Montana rule blocking trans residents from changing sex on birth certificate
-
SEC showdowns with CFP implications lead college football games to watch in Week 11
-
Taylor Swift's ‘Eras Tour’ concert film snubbed in 2025 Grammy Award nominations
-
Florida men's basketball coach Todd Golden accused of sexual harassment in Title IX complaint