UCLA Health Data Breach Affects 4.5 Million

University of California Health has announced a data breach.

According to a statement on their site, UCLA Health discovered back in May that an attacker had accessed part of their network.  The part that was compromised included “personal information, like name, address, date of birth, social security number, medical record number, Medicare or health plan ID number, and some medical information (e.g., medical condition, medications, procedures, and test results).”

UCLA Health notified the Federal Bureau of Investigation immediately.  They also brought in a computer forensic company.  The investigation is still ongoing.

So far the investigation has revealed some key facts.  The attack began sometime in September of 2014. The personal information of around 4.5 million people was compromised, although they have yet to see evidence of this information being used maliciously.

“We take our responsibility to protect personal information entrusted to us very seriously,” Dr. James Atkinson, interim associate vice chancellor and president of UCLA Hospital System said in a statement. “We are taking steps to protect data and have made modifications to the UCLA Health network to help protect against another cyber attack.”

91% of all Healthcare Organizations have suffered a breach since 2013, according to the Ponemon Institute, which conducts independent research on privacy, data protection, and information security policy.  This breach follows closely on the heels of the UPMC breach, the Anthem breach, and the Premera Blue Cross breach.

It seems to be open season on Healthcare organizations.  Will the others heed this disturbing pattern, and step up their cybersecurity game?
For information on how you can prevent your organization from being breached, visit www.miltonsecurity.com or call 714-515-4011.

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *