Medical Imaging Patients Exposed in Cyber Incident
Unauthorized actors accessed patient information, including exam and procedure details, scans, and Social Security numbers.
![A stethoscope circling a digital globe on top of a laptop keyboard A stethoscope circling a digital globe on top of a laptop keyboard](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltdb99f603e2b82c5e/64f172e35bee9812dfc9bc39/healthcare-bernie_moto-iStock_66955741_MEDIUM.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Right before Thanksgiving, East River Medical Imaging (ERMI) began sending letters to impacted individuals concerning a data security incident that it experienced.
On Sept. 20, ERMI detected suspicious activity occurring in its IT network and initiated its incident response process, launching an investigation alongside third-party cybersecurity experts and law enforcement.
ERMI determined that the threat actors accessed its network between Aug. 31 and Sept. 20, gaining access to documents in the system and potentially even copying some of them. The documents that were accessed vary depending on the individual, but included data like name, contact information, insurance information, Social Security number, exam and procedure details, imaging results, and physician information.
ERMI is offering complimentary credit monitoring services to those whose Social Security or driver's license numbers were part of the impacted data. It recommends that patients review their healthcare statements and contact their health insurer or the medical center immediately if they find that they have been charged for services they did not receive.
Mohammad Waqas, CTO of Healthcare for Armis, noted that more and more healthcare organizations are bringing their assets online, offering greater attack surfaces for threat actors.
"Healthcare organizations cannot afford to put off strengthening cybersecurity. On an average day, more than 55,000 physical and virtual assets are connected to organizational networks; yet an astounding 40% of these assets are left unmonitored — leaving critical, exploitable gaps," he said in an emailed statement.
"We have and will continue to take steps to enhance the security of our computer systems and the data we maintain. To help prevent something like this from happening again, we have enhanced our network monitoring capabilities, and will continue to assess and supplement our security controls going forward," the company said in a statement.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024