Verus Inc., the IT contractor that has been implicated in security breaches at at least five different hospitals across the country, has gone out of business.

The Bellevue, Wash., company, which built and maintained Websites and services on behalf of some 40 to 60 hospitals nationwide, was disbanded "eight to 10 weeks ago" when investors pulled the plug following a massive blunder that exposed many of its clients' data to the outside world, according to an executive at MedSeek, an IT contractor that is now handling many of Verus' clients.

While reports of the breaches have been issued in dribs and drabs, all of the data losses can now be attributed to a single incident, in which Verus employees left a firewall down following the transfer of data from one server to another, according to David Levin, vice president of marketing at MedSeek.

"All of the breaches were the result of an IT error, as opposed to any problems with the software," Levin says. "They made a huge mistake, and it literally shut the company down. It's really a cautionary tale."

Verus's Website has been pulled down, and calls to the company's offices are referred to MedSeek customer service. No announcement of the shutdown, nor any explanation of the reasons behind it, appear to have been issued to the media or to Verus partners.

"We're not sure if the breaches were the only reason why they closed down -- there might have been other issues as well," Levin says. "But we know we got the call to support the [Verus] customers very soon after the breach was supposed to have happened."

Reports of the breaches range from mid-April to late May, but Verus has been implicated in at least five disclosures since the beginning of June:

All of the hospitals said they immediately terminated their contracts with Verus following the breach. All of the hospitals said they have yet to see any reports of hackers or criminals using the data.

According to Levin, the breaches all affected hospitals using Verus's VPAC online billing system, which MedSeek does not use. Verus's hospital customers will be given a choice as to whether they want to migrate to the MedSeek platform and services, or move to some other vendor.

Have a comment on this story? Please click "Discuss" at the top of this page. If you'd like to contact Dark Reading's editors directly, send us a message.