Idaho health system Kootenai Health reports cyberattack, data breach
Learn More
Kootenai Health, based in Coeur d'Alene, Idaho, is reporting a cybersecurity incident that disrupted several of its IT systems, including those of Kootenai Clinic, Kootenai Outpatient Surgery, and Kootenai Outpatient Imaging.
The incident, which occurred on or around February 22, 2024, involved an unauthorized actor gaining access to certain data within the Kootenai Health network. Kootenai Health became aware of the breach on March 2, 2024, after detecting unusual activity that impacted access to some of its IT systems.
The compromised information includes sensitive patient data such as:
- Names
- Dates of birth
- Social Security numbers
- Driver's license or government-issued identification numbers
- Medical record numbers
- Medical treatment and condition details
- Medical diagnoses
- Medication information
- Health insurance information
No details about the attack or the number of affected individuals are disclosed.
Update - Kootenai Health reports that the breach is impacting over 464,000 patients and the attack is claimed by 3AM ransomware operation.
As of now, Kootenai Health has not found evidence of any misuse of the compromised data. On August 12, 2024, the health system began notifying potentially affected individuals about the incident through official letters.
