Hackers stole patient data from Alabama Cardiovascular Group's systems

Birmingham, Alabama-based Alabama Cardiovascular Group said it experienced a data security incident that compromised the sensitive personal information of patients and staff.

 

In a notice of data breach published on its website, Alabama Cardiovascular Group said that on July 2, it became aware of unauthorised access to its internal network. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“ACG disconnected the ACG computer network from the internet and cut off unauthorised access. To protect against an incident like this from reoccurring, ACG reset user passwords and implemented additional security measures,” ACG said.

 

“ACG’s investigation determined that between June 6, 2024 and July 2, 2024, unauthorised parties gained access to the ACG network and obtained personal information. ACG has been in contact with law enforcement.”

 

The compromised data included names, addresses, email addresses, phone numbers, dates of birth, social security numbers, driver’s license numbers, passport numbers health insurance information and health insurance claims information, usernames and passwords, and medical information including dates of services, diagnoses, medications, images, lab results, and financial data including credit card or debit card information, and bank account information.

 

ACG is yet to disclose how many individuals were impacted by the data security incident, but said it has started notifying affected individuals and has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

The healthcare provider has also offered two years of complimentary identity protection and credit monitoring services through Experian IdentityWorks SM to all affected individuals.

 

As of now, no known hacker group has claimed responsibility for the cyber attack on ACG and the healthcare provider is yet to share details on who is behind the incident.