Hackers Steal Patient Data from Community Health Systems

According to Community Health Systems Inc, data containing nonmedical patient information on approximately 4.5 million clients was stolen by a Chinese hacker computer network.

Community Health Systems and its security contractors, Mandiant, believe the attack occurred in April and June, according to the company’s regulatory filing. The data stolen include patient names, addresses, birthdates, telephone numbers, and social security numbers, all of which are to be protected under the Health Insurance Portability and Accountablility Act. Financial and medical information were not obtained, according to Community Health Systems.

The Tennessee-based corporation has 206 hospitals in 29 states. A group originating from China used highly sophisticated malware and technology to carry out the attack, according to Community Health Systems. All patients affected by this have been notified by the company, and they are being offered identity and theft protection services.—Kerri Fitzgerald

Source: Thomson Reuters. 2014; Community Health Systems says data stolen in cyber attack.