Community Clinics among affiliates hacked
Published 7:15 pm Monday, August 18, 2014
Editor’s note: The original version of this article contained incorrect information regarding which patients were impacted by hackers. The error has since been corrected. We regret the error and are happy to set the record straight.
NATCHEZ — Hackers obtained personal information of patients who visited Natchez Community Clinics as part of a breach to the hospital’s parent company’s computer system.
Community Health Systems, which operates 12 hospitals in Mississippi and is currently in negotiations to purchase Natchez Regional Medical Center, said Monday that Chinese hackers stole personal information of nearly 4.5 million clients.
Sue Loy, director of marketing for Natchez Community Hospital, said Monday the information could have included any patients who were seen at the hospital’s associated clinics in the last five years.
“Limited personal identification data belonging to some patients who were seen at our Community Clinics over the past five years was transferred out of our organization in a criminal cyber attack by a foreign-based intruder,” Loy said. “The transferred information did not include any medical information or credit card information, but it did include names, addresses, birthdates, telephone numbers and social security numbers.”
Loy said the company has no reason to believe the data would ever be used, but that all impacted patients would be notified by letter and offered free identity theft protection.
“Our organization believes the intruder was a foreign-based group out of China that was likely looking for intellectual property,” Loy said. “The intruder used highly sophisticated methods to bypass security systems. The intruder has been eradicated and applications have been deployed to protect against future attacks.
“We are working with federal law enforcement authorities in their investigation and will support prosecution of those responsible for this attack.”
Loy said any patients impacted by the data breach would receive a letter from the company by Aug. 30.
CHS, in a regulatory filing, said the company and its security contractors, Mandiant, believes the attack took place in April and again in June.
The company said it has removed the malware from its systems and implemented other reradiation to protect against future intrusions.
Community Health systems operates 206 hospitals in 29 states.
The other hospitals in Mississippi include Gilmore Memorial Regional in Amory, Northwest Mississippi Regional in Clarksdale, Tri-Lakes Medical Center in Batesviille, Central Mississippi Medical Center in Jackson, Madison River Oaks Medical Center in Canton, River Oaks in Flowood, Wesley Medical Center in Hattiesburg, Crossgates River Oaks in Brandon, River Region Health System in Vicksburg and Woman’s Hospital in Flowood.