According to a news report, a criminal investigation has not yet determined what, if any, personal information was put at risk in the incident, according to Sandra Whitley Ryals, director of the Virginia Department of Health Professions.
Nevertheless, the state is mailing individual notifications to 530,000 people whose prescription records may have contained Social Security numbers, Ryals said.
The hacker gained access to the Virginia Prescription Monitoring Program computer system, which is designed to deter prescription drug abuse, and demanded a $10 million ransom. The hacker has not been found.
The state is also notifying 1,400 registered users of the database, mostly doctors and pharmacists, who may have provided Social Security numbers when they registered for the program, the report says. The database contains more than 35 million prescription records.
Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.