Zoll Medical Corp Suffers a Data Breach

Zoll Medical Corp, manufacturer of medical device and software has disclosed that  data breach that resulted in the possible theft of records belonging to about a million people.

The products manufactured will assist in advanced emergency care, while increasing clinical and operational efficiencies include cardiac monitoring, oxygen therapy and ventilation.

Zoll said it had first detected unusual activity on its internal network on Jan. 28. It then consulted with third-party cybersecurity experts and informed law enforcement, but surprisingly did not cut access to whoever had breached its network until Feb. 2.

The incident resulted in the possible theft of data of 1,004,443 people. The data may have included names, addresses, dates of birth and Social Security numbers, and in some cases details about whether the individual has used or was considering using its product.

Affected users are being offered 24-month identity protection from Experian Identity Works, with an investigation into the theft ongoing. The form of attack has not been disclosed.

It’s been suspected as a ransomware attack, but no ransomware groups are currently taking responsibility and it could have been a simple breach and data exfiltration.

Tracking and protecting the PHI data one holds is a priority for all healthcare organizations. With  the advancements in AI and machine learning techniques, organizations can now leverage automation to accurately discover PHI data at scale no matter where it’s stored.