With the global pandemic, healthcare organizations continue to fall victim to data leaks involving compromise on privacy, personal information, and sensitive health records maliciously being sold or distributed on the Dark Web.

On January 27, Personal Touch Home Care subsidiaries discovered a cyberattack on its private cloud infrastructure managed by a service provider. The healthcare organization notified over 753,000 patients who may have been affected by this data leak.

The cloud environment analysis revealed that patient information might have been compromised in the attack, including identifiable information like names, addresses, telephone numbers, dates of birth, and Social Security numbers. Additionally, the leak may have disclosed the client’s financial information, such as check copies, credit card numbers, bank account information, medical treatment records, health insurance card, and health plan benefit numbers. Employee information is also part of those that were compromised.

Personal Touch subsidiaries initially reported in December of 2019 that 156,400 of the cloud-based electronic health records hosted by Crossroads Technologies were compromised by ransomware attacks.

Many healthcare organizations are adopting and implementing cloud infrastructure, but most are not prepared to tackle the threats like data leaks and identity theft. If you suspect you are affected by this leak, we recommend the use of Trend Micro ID Security.

Trend Micro ID Security is a simple and powerful identity theft protection app to help you safeguard your privacy and personal information. It monitors your leaked personal data and sends you an alert notification when compromised so you can take corrective action.