WS Audiology hit by ransomware attack, patient data breached
Learn More
WS Audiology, the world's third-largest hearing aid company and the second-largest in Denmark, has experienced a data breach following a cyberattack.
The breach, impacted the company's IT systems in Australia, New Zealand, Singapore, and Hong Kong, has compromised sensitive personal data, according to a report by MedWatch.
The breach was first detected on July 5, 2024, by WS Audiology's Hong Kong office. WS Audiology has taken measures to contain the incident and secure its systems. The cyberattack is attributed to the ransomware group Blacksuit, and led to the compromise of various types of sensitive information. The stolen data includes:
- Patients' names
- Birth dates
- Gender
- Addresses
- Phone numbers
- Email addresses
- Health information
- Audiologist details
- Hearing aid information
- Visit data
- Salary and bank account details of both current and former employees
No details are disclosed about the number of affected individuals.
The ransomware group is now blackmailing WS Audiology, threatening to leak the compromised personal data. The company is actively investigating the scope of the breach to determine the specific personal information affected. WS Audiology has notified the Office of the Privacy Commissioner of Personal Data in Hong Kong and is cooperating with the authorities to resolve the matter.
WS Audiology has stated that investigations are ongoing to determine if the breach has affected deeper parts of the company's systems and to identify all categories of information that may have been impacted. The company has assured customers and employees that it will provide further updates as more information becomes available.
WS Audiology is urging both its staff and customers to maintain vigilance against potential cyber threats. The company has recommended several precautionary measures, including:
- Updating passwords
- Enabling multi-factor authentication
- Practicing good online security habits, such as avoiding messages or links from unknown senders
Customers and employees are encouraged to monitor the company's website for further updates and to report any suspicious activities.
