Vincera Institute says ransomware attack compromised the healthcare information of 25,000 patients

Philadelphia-based healthcare provider Vincera Institute suffered a ransomware attack that compromised the sensitive personal information of thousands of patients.

In a security incident notification, the healthcare provider said that on April 29, it was a target of a ransomware attack that potentially compromised patient data, including “personal and medical information”.

Vincera Institute said that as soon as it identified the security incident, it launched an investigation with assistance from third-party cyber security professionals to contain and mitigate the ransomware attack and understand its overall impact.

“The primary focus has been on securing our systems and safeguarding patient data. While the investigation is still ongoing, we are providing this notice to ensure transparency and offer resources to affected individuals to protect their information,” the provider said.

The compromised data, according to Vincera Institute, included name, date of birth, address, phone number, email address, Social Security number, medical history, treatment records, Insurance information, and any other information that patients have shared with Vincera Institute.

While the company in its press release did not state the number of affected individuals, it said in a filing with the U.S. Department of Health and Human Services Office for Civil Rights that 10,000 patients of Vincera Core Physicians, 5,000 patients of Vincera Surgery Center, 5,000 patients of Vincera Rehab, and 5,000 patients of Vincera Imaging were affected by the security incident.

The healthcare provider also said that presently there is no evidence of misuse of the compromised patient data, but the possibility of the same cannot be ruled out. All affected individuals, who have received the security incident notice, should remain vigilant of any suspicious activity and report the same to law enforcement immediately.  

Vincera Institute has also enhanced its security measures to avoid such incidents in the future. It has notified appropriate authorities about the incident and is cooperating fully with their investigations. Also, a dedicated hotline has been created where affected individuals can call and clarify their queries.

“Vincera Institute deeply values the trust patients have placed in our care, and we are committed to maintaining transparency throughout this process,” the healthcare provider added.