Data breach at Maui Healthcare Clinic impacts over 120,000 individuals following cyberattack

The Community Clinic of Maui, operating as Malama I Ke Ola Health Center, revealed last week that a cyberattack earlier this year resulted in a significant data breach affecting over 120,000 individuals. This disclosure follows months of investigation and a previous announcement regarding technical issues that left the clinic unable to reopen for more than two weeks.

The notorious LockBit ransomware group, known for its widespread attacks, claimed responsibility for the cyberattack, which targeted the clinic in early May. According to the clinic’s recently published data breach notice, the breach was detected on May 7, with the attackers suspected of stealing sensitive personal data between May 4 and May 7.

The compromised data includes personal details such as names, Social Security numbers, birth dates, driver’s license and passport numbers, bank and payment card information, login credentials, and sensitive medical records. Despite the extent of the breach, the Community Clinic of Maui stated that it had found no evidence of the exposed information being misused for identity theft. Nevertheless, the organization is offering complimentary credit monitoring services to those affected.

The clinic’s report to the Maine Attorney General’s Office confirmed that the breach impacted 123,882 individuals. While it remains unclear if LockBit has published the stolen data on its leak site, the possibility of cybercriminals exploiting the information cannot be ruled out.

The LockBit ransomware group, whose operations were recently disrupted by law enforcement, has been linked to numerous cyberattacks across various sectors. The group’s alleged leader was also unmasked earlier this year, leading to further scrutiny of its activities.