Boston Children's physician group suffers data breach

Boston Children’s Health Physicians notified patients and the public of a Sept. 6 data breach of its systems, caused by an IT vendor. The multispecialty group said in a statement that it immediately deployed cyberattack response protocols once it became aware of the incident. 

The unnamed IT vendor alerted Boston Children’s to suspicious network activity, after which an investigation showed an unauthorized third party had gained access to systems and stolen data files. 

The information taken included the names, dates of birth, Social Security numbers, insurance and billing information, driver’s license numbers, and medical record numbers from employees and patients. However, the electronic health record was not breached, meaning clinical data on patients was not stolen, Boston Children’s said. 

Hacker group BrianLian claimed responsibility for the attack on a dark web forum, where the data is likely to be put up for sale. 

BianLian has claimed responsibility for 60 ransomware incidents so far this year, data from Comapritech shows. However, there is no evidence ransomware was deployed in the breach at Boston Children’s. 

The physician group said it worked with a cyber forensics agency to investigate the attack. That investigation appears to now be concluded, as Boston Children’s started sending letters to impacted patients on Oct 4. 

The full cybersecurity incident announcement can be found here.

Chad Van Alstin Health Imaging Health Exec

Chad is an award-winning writer and editor with over 15 years of experience working in media. He has a decade-long professional background in healthcare, working as a writer and in public relations.

Around the web

Compensation for heart specialists continues to climb. What does this say about cardiology as a whole? Could private equity's rising influence bring about change? We spoke to MedAxiom CEO Jerry Blackwell, MD, MBA, a veteran cardiologist himself, to learn more.

The American College of Cardiology has shared its perspective on new CMS payment policies, highlighting revenue concerns while providing key details for cardiologists and other cardiology professionals. 

As debate simmers over how best to regulate AI, experts continue to offer guidance on where to start, how to proceed and what to emphasize. A new resource models its recommendations on what its authors call the “SETO Loop.”