Delta County hospital district says cyber attack affected over 570,000 patients

Delta County Memorial Hospital District said it suffered a data security incident that compromised the sensitive personal information of almost 150,000 individuals.

 

In a data breach notice filed with the Office of Maine Attorney General, the Colorado-based healthcare provider said that on May 30, it identified suspicious activity in its internal network. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to contain the incident, secure the affected network and notified relevant law enforcement about the same.

 

“The investigation determined that an unknown, unauthorised third party gained access to Delta’s network between May 27, 2024 and May 30, 2024 and may have acquired certain files from Delta’s systems,” the hospital district said.

 

The compromised data included names, dates of birth, phone numbers, addresses, financial account information, medical information, health insurance information, Social Security numbers, and driver’s license numbers. Delta’s filing with the Maine state regulator revealed that at least 148,363 individuals were impacted by the incident.

 

“We are taking steps to reduce the risk of this type of incident occurring in the future, including further enhancing our security measures,” Delta added.

 

While the healthcare provider found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities.

 

Delta has offered one year of complimentary identity protection and credit monitoring services through Experian IdentityWorks Credit 3B to all affected individuals.

 

At the time of publishing, no known ransomware group has claimed responsibility for the cyber attack on Delta County Memorial Hospital District. The healthcare provider also did not share details on who is responsible for the attack, the nature of the same or whether it has received a ransom demand.