ALPHV Ransomware Attack on MNGI Digestive Health Affected 766,000 Individuals
MNGI Digestive Health, a physician-owned gastroenterology practice in Minnesota, has confirmed that the personal and protected health information of 767,670 individuals was exposed and potentially stolen in an August 2023 cyberattack.
A security breach was detected on August 25, 2024, and third-party cybersecurity specialists were engaged to investigate the unauthorized network activity. They confirmed that portions of the network were first accessed by an unauthorized third party on August 20, 2024.
The breach notice does not include details of the attack; however, the now-defunct ALPHV ransomware group claimed responsibility for the attack and claimed to have exfiltrated more than 2 terabytes of data. MNGI Digestive Health said it only learned that individuals’ personal and protected health information had been compromised in the attack on July 7, 2024, almost 11 months after the attack occurred and 10 months after MNGI Digestive Health was added to the ALPHV data leak site.
MNGI Digestive Health said it determined that the exposed data varied from patient to patient and may have included names plus one or more of the following: medical information, health insurance information, dates of birth, patient account numbers, financial account information, driver’s license or state ID numbers, passport numbers, payment card information, usernames and associated passwords, taxpayer ID numbers, biometric data, and/or Social Security numbers. At the time of issuing notifications, MNGI Digestive Health said it is unaware of any misuse of the affected data. MNGI Digestive Health said additional measures have been implemented to enhance the security of its digital environment to reduce the risk of further breaches in the future.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Due to the claims made by the ALPHV group, the affected individuals should take advantage of the complimentary credit monitoring and identity theft protection services that are being offered. Individuals requiring further information can call MNGI Digestive Health’s toll-free helpline – 1- 888-326-0965 – which is manned from 9:00 a.m. to 9:00 p.m. Eastern Time.
