Medical devices maker LivaNova says October cyber attack impacted 130k individuals

Texas-based medical devices manufacturer LivaNova said it suffered a significant data security incident that compromised the sensitive personal information of close to 130,000 individuals.

 

In a data security incident notice filed with the Office of the Maine Attorney General, LivaNova said that on November 19, it became aware of a data security incident that affected portions of its internal network. The company said it took the affected systems offline and notified law enforcement about the incident.

 

The company launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident. According to the investigation, LivaNova’s internal network was breached on October 26.

 

“Based on our investigation, on April 10, 2024, we learned that an unauthorised party obtained certain of your personal information,” LivaNova said.

 

The compromised data included names, phone numbers, email and postal addresses, Social Security numbers, dates of birth, medical information including treatment, condition, diagnosis, prescription, physician, medical record number and device serial numbers, and health insurance information.

 

LivaNova’s filing with the Maine state regulator’s office revealed that at least 129,219 individuals were affected by the data security incident.

 

The company has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered two years of complimentary identity protection and credit monitoring services through Experian to all affected individuals.

 

In December, the LockBit ransomware group claimed responsibility for the cyber attack on LivaNova and listed the company as victim on its data leak site. The group claimed to be in possession of 2.2 terabytes of data stolen from the medical devices manufacturer.