"Sango Family Dentistry in Clarksville, Tennessee, has recently confirmed that the protected health information of up to 27,000 patients was compromised in an August 2024 cyberattack. The security incident was detected on August 27, 2024, and disrupted its computer systems. Steps were taken to secure its computer systems and prevent further unauthorized access, and cybersecurity experts were engaged to determine the nature and scope of the intrusion.
The forensic investigation confirmed that an unknown actor accessed its network on or around August 27, 2024, and exfiltrated files. The file review has recently been completed and confirmed that patients’ protected health information was stolen. The types of data involved varied from individual to individual and may have included one or more of the following: name, date of birth, diagnosis, diagnosis code, treatment information, provider name(s), health insurance information, billing/claim information, health benefit plan number, subscriber member number, Social Security number, and/or driver’s license/state identification number.
Notification letters were mailed to the affected individuals on October 21, 2024, who had identifiable address information and complimentary identity protection services have been offered. At the time of issuing notifications, Sango Family Dentistry was unaware of any misuse of the compromised data."
swidup
commented
3 days ago
https://www.hipaajournal.com/data-breach-south-west-family-medicine-associates-sango-family-dentistry/
"Sango Family Dentistry in Clarksville, Tennessee, has recently confirmed that the protected health information of up to 27,000 patients was compromised in an August 2024 cyberattack. The security incident was detected on August 27, 2024, and disrupted its computer systems. Steps were taken to secure its computer systems and prevent further unauthorized access, and cybersecurity experts were engaged to determine the nature and scope of the intrusion.
The forensic investigation confirmed that an unknown actor accessed its network on or around August 27, 2024, and exfiltrated files. The file review has recently been completed and confirmed that patients’ protected health information was stolen. The types of data involved varied from individual to individual and may have included one or more of the following: name, date of birth, diagnosis, diagnosis code, treatment information, provider name(s), health insurance information, billing/claim information, health benefit plan number, subscriber member number, Social Security number, and/or driver’s license/state identification number.
Notification letters were mailed to the affected individuals on October 21, 2024, who had identifiable address information and complimentary identity protection services have been offered. At the time of issuing notifications, Sango Family Dentistry was unaware of any misuse of the compromised data."