Aspire Rural Health System, a three-hospital system in Michigan, said it was unaware that its network had been compromised. An investigation revealed that hackers gained access to protected health information, including patient charts. 

The Centers for Medicare & Medicaid Services said “malicious actors” created fake accounts for Medicare beneficiaries through the agency’s patient portal, using stolen data from an unknown source. The incident is being investigated. 

Health IT company Episource confirmed a ransomware attack of its network exposed data from payer and provider customers alike, with details such as medical diagnoses and treatments possibly stolen by nefarious actors. 

The initial incident happened in April. Since that time, the notorious cybercrime cell Interlock has claimed responsibility. A data dump from the breach was put up for sale on the dark web.

Indiana-based Inotiv confirmed the data breach in a filing with the U.S. Securities and Exchange Commission. Infamous cybercrime cell Qilin has claimed credit for the attack.

According to a report from cybersecurity vendor Fortified Health Security, 92% of healthcare organizations reported a data breach last year, signaling that the space remains a prime target for data thieves. The analysis points to a need for improved staff training to bolster defenses.

A “sophisticated cybercrime group” is being blamed for an attack on the network of the private insurer, which may have exposed social security numbers and protected health information. The incident is still being investigated.

Law firm Wright & Schulte said they filed a legal complaint on behalf of patients, pointing to the health system’s alleged lack of transparency and negligence in protecting data as the basis for the lawsuit.

Faranak Firozan, 47, is a cybersecurity expert at Nvidia who regularly spoke on the topic of “cyber laundering.” Prosecutors in California allege she submitted fraudulent medical claims to an employer-sponsored insurance plan, bilking Cigna out of $100,000.

The number is almost double initial estimates. With final data breach notifications now sent, UnitedHealthcare said its investigation into the February 2024 ransomware attack is coming to a close.