7,000-Record Data Breaches Reported by Seneca Nation Health System & Catholic Charities
Seneca Nation Health System has reported a cyberattack to the HHS’ Office for Civil Rights that involved the protected health information of 7,633 patients. The Salamanca, NY-based non-profit public health system does not currently have a breach notice on its website and the information displayed on the HHS’ Office for Civil Rights breach portal is limited, stating that this was a hacking/IT incident involving a network server.
The breach report appears to be a ransomware attack by the Inc Ransom ransomware group that was added to its data leak site in May 2024. This is not the first ransomware attack on Seneca Nation Health System, as it experienced an attack in 2019 that prevented access to its charts and scheduling system, although in that attack no patient data was compromised. A cyberattack was also experienced in 2022 that involved the protected health information of up to 12,000 individuals.
Catholic Charities CYO of The Archdiocese of San Francisco
Catholic Charities CYO of the Archdiocese of San Francisco has recently announced that it has experienced a network security incident that exposed the protected health information of 7,168 individuals. The forensic investigation confirmed on July 31, 2024, there was unauthorized access to its network between September 23, 2023, and September 29, 2023, and during that time, files containing patient information may have been viewed or acquired.
The exposed data included full names, dates of birth, Social Security numbers, financial account/banking information, driver’s license numbers/state identification numbers, medical information, passport numbers, health insurance information, national identification numbers, medical histories, government-issued national identification numbers, and email usernames/passwords. Catholic Charities has not identified any misuse of the impacted data.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Complimentary identity monitoring and protection services have been offered to individuals whose Social Security numbers were involved in this incident.
