Kansas hospital data breach - 19,000 affected

McPherson Hospital, Kansas, has recently sent notification letters to 19,020 patients, informing them about a ransomware attack that occurred in July 2022. The internal investigation concluded on March 15, 2023, revealing that patient data, including names, dates of birth, Social Security numbers, medical treatment information, billing information, and health insurance information, may have been accessed. The notification letters were sent in early May, almost 10 months after the attack. Affected individuals have been offered complimentary single-bureau credit monitoring services, and McPherson Hospital has reviewed and enhanced its technical safeguards to prevent similar incidents from occurring in the future.