Incident

Mt. Graham Regional Medical Center reports data breach


Learn More

Mount Graham Regional Medical Center located in Safford, Arizona has reported a data breach resulting from a ransomware attack. On September 27, 2023, MGRMC became aware of a ransomware attack that had commenced around September 13, 2023. MGRMC halted unauthorized access within four hours of discovering the attack and enlisted the expertise of external cybersecurity professionals for further investigation.

The investigation verified that the ransomware attackers managed to access and acquire certain data within MGRMC's computer network, including files containing confidential patient information.

The breached information may vary depending on the individual but can encompass personal details such as:

  • names,
  • Social Security numbers,
  • addresses,
  • email addresses,
  • phone and fax numbers,
  • dates of birth,
  • driver's license numbers,
  • passport numbers,
  • medical information,
  • financial information.

The number of affected individuals and the nature of the attack are not disclosed.

Following their investigation, MGRMC initiated the process of sending data breach notification letters to individuals whose information was affected by this security incident.

On November 15, 2023, Mt. Graham Regional Medical Center posted an update on its website outlining the details of the attack and the subsequent actions taken by MGRMC and is offering free credit monitoring for 12 months to all affected individuals. Additionally, MGRMC is sending data breach notification letters to all individuals impacted by the recent security incident.

Mt. Graham Regional Medical Center reports data breach