Cyber attack on Tennessee-based healthcare systems provider affected over 400k patients

Chattanooga, Tennessee-based radiology information systems provider Specialty Networks said that the data security incident it suffered last year compromised the sensitive personal information of more than 400,000 individuals.

In a press release, Specialty Networks said that on December 18, it identified unusual activity in its internal network. The healthcare service provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident, took steps to secure the affected systems and notified relevant law enforcement about the same.

“The investigation revealed that on or around December 11, 2023, an unauthorised actor acquired certain data stored within Specialty Networks’ systems. Specialty Networks then undertook a comprehensive review of the potentially impacted data and, on May 31, 2024, determined that certain personal and/or protected health information may have been involved,” Specialty Networks said.

The compromised data included names, dates of birth, driver’s license numbers, Social Security numbers, medical record numbers, treatment and condition information, diagnoses, medications, and health insurance information. While the press release didn’t state the number of affected people, a filing with the U.S. Department of Health and Human Services Office for Civil Rights revealed that at least 411,037 individuals were impacted by the incident.

Specialty Network has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

It has also offered complimentary identity protection and credit monitoring services through IDX to all affected individuals.

“Specialty Networks takes the security and privacy of personal information in its possession very seriously and has taken additional steps to prevent a similar event from occurring in the future,” the healthcare service provider added.