Cyberattack impacts 2.2 million oncology patients
Another healthcare cyberattack has come to light, this time affecting 2.2 million oncology patients.
21st Century Oncology Holdings, which operates 145 cancer treatment centers in the U.S., and another 36 centers in Latin America, learned of the attack last November. An investigation revealed that the organization's database could have been accessed as early as Oct. 3, according to a notice on its website.
The FBI asked the company to delay notification so it wouldn't interfere with their investigation.
In its filing with the Securities and Exchange Commission, 21st Century Oncology said certain information from current and former patients "may have been copied and transferred. The company has no indication that patient information has been misused in any way.” The SEC filing also reveals the company may not have enough insurance to cover all attack-related liabilities.
Compromised information could have included patient names, Social Security numbers, physician names, diagnosis and treatment information and insurance information.
The company is offering those affected one year of credit monitoring and said, "In addition to security measures already in place, we have also taken additional steps to enhance internal security protocols to help prevent a similar incident in the future."