Data Breaches
Healthcare billing vendor confirms 2.1 million patient records exposed
Names, insurance numbers and treatment codes were copied from a reporting database through a SQL injection flaw.
/ 5 min read
In briefNames, insurance numbers and treatment codes were copied from a reporting database through a SQL injection flaw.
The company said an attacker abused an injection flaw in a reporting module to query a database that should not have been reachable from the internet.
Notification letters are being sent to 2.1 million patients across 14 hospital groups. The firm is offering two years of identity monitoring.
Regulators in two jurisdictions have opened inquiries into how long the flaw was present and whether logging was sufficient to scope the breach.
Filed under Malware & ThreatsData Breaches
Does this story affect you?
Tell us about your environment and a SentriXa security editor will get back to you within one business day.