BianLian has listed Boston Children’s Health Physicians on its dark web site, threatening to release stolen patient and employee data.
New york based BCHP said that on Sept. 6, an unnamed IT vendor informed the pediatric practice that it identified unusual activity in its systems.
BCHP’s investigation into the incident determined that an unauthorized third party gained access to the network on Sept. 10, taking certain files from its network.
As per the notification, upon learning of this, we moved quickly to isolate and contain the incident, engaged best-in-class cybersecurity experts, and notified law enforcement. Also, it implemented additional technology security protocols to protect our systems.
BHCP began the process of notifying impacted individuals and will be providing resources to those affected by the cybersecurity incident
BCHP said the files compromised in the incident include current and former employee, patient, and guarantor information. That includes names, Social Security numbers, addresses, dates of birth, driver’s license numbers, medical record numbers, health insurance information, billing information, and/or limited treatment information.
BCHP said its electronic medical record systems are on a separate network and were not affected by the incident.
BianLian had Boston Children’s Health Physicians listed on its dark web site, claiming to have the practice’s data, including finance data, HR data, mailboxes and internal and external email correspondences, database exports, protected health information and personally identifiable records, health insurance records and minors’ data.
The BCHP breach highlights the most formidable threat and vulnerability in the health privacy landscape
