It has been reported that Atrium Health, previously Carolinas HealthCare System, revealed that data of approximately 2.65 million patients including addresses, dates of birth and social security numbers may have been compromised in a breach at its third-party provider AccuDoc Solutions. IT security experts commented below.
“The Atrium breach is further evidence that the healthcare industry continues to be a target, and patient data will continue to be at risk because of an increasingly complex and expanding attack surface. In the bigger picture, it would be premature to speculate on the overall damage to Atrium’s employees and patients but everyone should assume their personal information has already been stolen many times over. If anything, hackers are persistent meaning they will be successful 100 percent of the time when they attempt to breach a system. This stacks the cards against the defenders and the healthcare industry as a whole needs to rethink their strategy around network detection and start taking the fight to the hacker by going on the offensive with more advanced technologies and servics that will stop threats before they ever materialise.”
“It’s encouraging to see the forensic examination concluded that although the data was viewed, it was unavailable for download or exfiltrate the data. However, better detection controls could have prevented the attackers from going undetected in the system for over a week.
The incident serves as a reminder that companies and providers across all verticals are attractive targets and no company should consider itself ‘too small’ or uninteresting to be a target.”
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.