teiss – News – Australian healthcare provider suffers ransomware attack, patient records stolen | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware


Epichealth Medical Clinic said a data security incident it suffered earlier this year compromised the sensitive personal and medical information of its patients.
 
Based in Victoria, Australia, Epichealth Medical Clinic is a privately owned healthcare provider operating a network of four mixed-billing general practice clinics. Its facilities include the Warrnambool Medicare Urgent Care Clinic, Epichealth Ocean Grove Marketplace, Epichealth Ocean Plaza, and Epichealth Portarlington.
 
In a data security incident notice on its website, Epichealth said it recently detected unauthorised activity on its internal network, disrupting some of its IT systems. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.
 
It also took steps to secure the affected network and notified relevant law enforcement authorities about the incident.
 
The investigation determined that the threat actor who breached its internal network accessed and exfiltrated confidential data including names, dates of birth, email addresses, phone numbers, addresses, Medicare card numbers, centrelink customer reference numbers, veteran card numbers and health information.
 
The healthcare provider confirmed that its clinics remain operational and has advised all affected individuals to remain vigilant, not respond to suspicious messages requesting credentials, money, or sensitive information and avoid opening attachments or clicking links in emails from unknown or untrusted sources.
 
Epichealth has notified the Australian Cyber Security Centre and the Office of the Australian Information Commissioner of the incident and is working closely with both authorities to investigate the matter.
 
On October 31, the Gentlemen ransomware group claimed responsibility for the cyber attack on Epichealth and listed it as a victim on its data leak site. The group claimed to have obtained confidential data from the healthcare provider and threatened to release it publicly unless its ransom demands were met.

——————————————————–
Click Here For The Original Source.

.........................