Hackers access information on 4.5 million CHS patients - 21 News Now, More Local News for Youngstown, Ohio -

UPDATED

Hackers access information on 4.5 million CHS patients

Posted: Updated:
FRANKLIN, Tn. -

A company that operates four Valley hospitals has confirmed that its computer network was the target of an external, criminal cyber attack, exposing information from 4.5-million patients.

According to a document filed with the Securities and Exchange Commission, Community  Health Systems and its forensic expert, Mandiant, believe the attacker was an “Advanced Persistent Threat” group originating from China who used highly sophisticated malware and technology to attack the Company's systems. CHS believes the attack occurred in April and June of this year.

CHS says that the information is non-medical, and does not include credit card information.  However it includes patient names, addresses, birthdates, telephone numbers and social security numbers.

CHS recently took over operations of Sharon Regional Hospital, and is the  parent company of ValleyCare, which operates Northside, Trumbull Memorial Hospital and Hillside Rehabilitation Hospital.

ValleyCare issued a statement Monday afternoon acknowledging  that the data includes some from patients who were seen at physician practices and clinics affiliated with ValleyCare Health System of Ohio over the past five years.


CHS says the attacker was able to bypass the company's security measures and successfully copy and transfer certain data outside the company. Since first learning of this attack, CHS tells federal regulators that it has worked closely with federal law enforcement authorities in connection with their investigation and possible prosecution of those determined to be responsible for this attack.

The company also engaged Mandiant, which has conducted a thorough investigation of this incident and is advising the company regarding remediation efforts. Immediately prior to the filing of the document with the  SEC,  CHS says it completed eradication of the malware from its systems and finalized the implementation of other remediation efforts that are designed to protect against future intrusions of this type.

The company has been informed by federal authorities and Mandiant that this intruder has typically sought valuable intellectual property, such as medical device and equipment development data. However, in this instance the data transferred was non-medical patient identification data related to the company's physician practice operations and affected approximately 4.5 million individuals who, in the last five years, were referred for or received services from physicians affiliated with the company.

The company has confirmed that this data did not include patient credit card, medical or clinical information; the data is, however, considered protected under the Health Insurance Portability and Accountability Act (“HIPAA”) because it includes patient names, addresses, birthdates, telephone numbers and social security numbers.

The company is providing appropriate notification to affected patients and regulatory agencies as required by federal and state law.

The company will also be offering identity theft protection services to individuals affected by this attack. CHS says it carries cyber/privacy liability insurance to protect it against certain losses related to matters of this nature.

According to the SEC filing, while this matter may result in remediation expenses, regulatory inquiries, litigation and other liabilities, at this time, the company does not believe this incident will have a material adverse effect on its business or financial results.

  • Ohio/Pennsylvania NewsMore>>

  • Man steps in front of truck, sets himself on fire

    Man steps in front of truck, sets himself on fire

    Monday, September 15 2014 7:14 PM EDT2014-09-15 23:14:38 GMT
    OBERLIN, Ohio (AP) - Authorities say a man stepped into traffic on a northeast Ohio highway and then set himself on fire. Ohio State Highway Patrol officials say 28-year-old Hugo Ramos of Cleveland pulled to the side of the highway, stepped into the road and was hit by a truck. Ramos then got up, retrieved a container of gasoline from his car, swallowed some of it, poured the rest on his body and then set himself on fire as three children sat in his car. Officials say a bystander extinguishe...More >>
    OBERLIN, Ohio (AP) - Authorities say a man stepped into traffic on a northeast Ohio highway and then set himself on fire. Ohio State Highway Patrol officials say 28-year-old Hugo Ramos of Cleveland pulled to the side of the highway, stepped into the road and was hit by a truck. Ramos then got up, retrieved a container of gasoline from his car, swallowed some of it, poured the rest on his body and then set himself on fire as three children sat in his car. Officials say a bystander extinguishe...More >>
  • Police: Man lying in road struck by car, killed

    Police: Man lying in road struck by car, killed

    Monday, September 15 2014 10:29 AM EDT2014-09-15 14:29:55 GMT
    HERMINIE, Pa. (AP) - Authorities say a man apparently lying in the road in front of a western Pennsylvania high school was struck and killed by a car. Officials in Westmoreland County said the accident happened shortly after 1:40 a.m. Monday in front of Yough High School in Sewickley Township. State police said the pedestrian was apparently lying in the northbound lane of Lowber Road when he was hit by a car. Police said the driver reported seeing what appeared to be an object in the road an...More >>
    HERMINIE, Pa. (AP) - Authorities say a man apparently lying in the road in front of a western Pennsylvania high school was struck and killed by a car. Officials in Westmoreland County said the accident happened shortly after 1:40 a.m. Monday in front of Yough High School in Sewickley Township. State police said the pedestrian was apparently lying in the northbound lane of Lowber Road when he was hit by a car. Police said the driver reported seeing what appeared to be an object in the road an...More >>
  • Central Ohio teen shot to death

    Central Ohio teen shot to death

    Monday, September 15 2014 9:58 AM EDT2014-09-15 13:58:15 GMT
    COLUMBUS, Ohio (AP) - A central Ohio teenager was shot to death over the weekend. The Franklin County coroner identified the victim as 17-year-old Reb Barbee. Police say the teen was shot at about 5 a.m. Sunday in Prairie Township west of Columbus. Friends and neighbors told reporters that Barbee stumbled into his home leaving a trail of blood. The Franklin County Sheriff's Office hasn't released any details of the shooting and hasn't announced an arrest. Copyright 2014 The Associated Press....More >>
    COLUMBUS, Ohio (AP) - A central Ohio teenager was shot to death over the weekend. The Franklin County coroner identified the victim as 17-year-old Reb Barbee. Police say the teen was shot at about 5 a.m. Sunday in Prairie Township west of Columbus. Friends and neighbors told reporters that Barbee stumbled into his home leaving a trail of blood. The Franklin County Sheriff's Office hasn't released any details of the shooting and hasn't announced an arrest. Copyright 2014 The Associated Press....More >>
Powered by WorldNow
All content © Copyright 2000 - 2014 Worldnow and WFMJ. All Rights Reserved. For more information on this site, please read our Privacy Policy and Terms