Cyber attack on healthcare provider CentroMed exposes patient data

San Antonio-based healthcare provider CentroMed revealed that hackers accessed its computer network, compromising sensitive patient information. The breach occurred around April 30, 2024, and involved the unauthorized acquisition of files containing data on current and former patients.

 

In a statement, CentroMed acknowledged that the stolen data may include patient names, addresses, birth dates, Social Security numbers, and financial account details. The revelation follows reports of network issues impacting patient care and appointment scheduling.

 

Isabel Correa, a CentroMed patient affected by the breach, expressed her distress. Correa, who suffered a stroke last month and is currently unable to work, shared her frustration over being denied disability benefits due to inaccessible medical records. “It’s hard when you don’t have money coming in,” she said, emphasizing the challenges of being a single mother.

 

Beverly Ohlhausen, another patient, voiced concerns about potential identity theft. “They can use it for identity theft, you name it, anything,” she remarked, highlighting the broader implications of the data breach.

 

CentroMed has initiated notifying affected patients and established a call center to address their concerns. Patients should review healthcare and financial statements for irregularities and report suspicious activities.

 

CentroMed has implemented additional security measures to safeguard its systems in response to the breach. This incident marks the second time CentroMed has faced a cyber attack, following a similar event in June 2023.

 

Jeff Fair, Vice President of Cybersecurity at the San Antonio Chamber, advised patients to consider data monitoring services to mitigate potential long-term impacts. “It’s hard to recover sensitive information once it’s exposed,” Fair noted, recommending vigilance and proactive measures to protect against future risks.

 

CentroMed regretted the incident and assured patients of its commitment to enhancing security protocols to prevent further breaches. The healthcare provider remains focused on addressing the immediate concerns of those affected and strengthening its defenses against cyber threats.