Northwell Health reports data breach through third party vendor
Learn More
Northwell Health, Long Island's largest healthcare system reports that a third party subcontractor fell victim to an intrusion by an "unauthorized party," potentially resulting in the exposure and acquisition of sensitive data. The third party is Perry Johnson & Associates, a Nevada-based firm specializing in medical transcription services for healthcare organizations, including Northwell,
Northwell's own systems were not impacted by this cyberattack, however, the healthcare system was notified by the third party that records related to Northwell's patients were among the files copied from their network.
Hackers accessed patients’
- names,
- addresses
- birthdates,
- medical records.
- lab results,
- insurance details,
At present, there is no evidence of any subsequent misuse of this information. Northwell initially stated that 3.9 million people were affected by the breach before recalling the statement. Northwell has not disclosed the number of affected individuals.
Northwell is offering free identity theft protection services, and Perry Johnson & Associates has established a dedicated call center for those affected.
