Ransomware attack on Texas pediatric provider exposes data of 55,000 patients

ABCD Children’s Pediatrics also discovered other evidence of hackers on the network, which included suspicious user accounts.
By Jessica Davis
04:36 PM

A ransomware attack at San Antonio-based ABCD Children’s Pediatrics may have breached the data of 55,447 patients.

Affected files may have included patient names, Social Security numbers, insurance billing information, dates of birth, medical records, laboratory results, procedure technology codes, demographic data, address and telephone numbers.

Pediatric patient records are a high commodity on the dark web, according to ICIT Senior Fellow James Scott. There two markets for child records, one including tax fraud. These are long form, full medical records available for sale. 

[SPECIAL REPORT: Ransomware rising, but where are all the breach reports?]

Investigators determined it was the Dharma virus, a variant of the Crisis ransomware family. While this virus doesn’t typically exfiltrate data, the provider was unable to rule it out, officials said.

The investigation also found more evidence of hackers accessing ABCD’s network via suspicious user accounts.

The IT team at ABCD was able to remove the virus and restore affected data from backups. No confidential data was lost, officials said. The organization never received a ransom notice or other communication from the hackers.

“ABCD remains concerned because it discovered user logs indicating that computer programs or persons may have been on the server for a limited period of time,” officials said in a statement.

ABCD alerted the FBI for further investigation, contacted the U.S. Department of Health and Human Services and began notifying patients on March 23. Officials said ABCD is still assessing physical and cybersecurity, although it found the source of the intrusion and has modified security to prevent a future incident.

Patients are being offered one year of free credit monitoring and can call the provider with any concerns or questions.

Twitter: @JessieFDavis
Email the writer: jessica.davis@himssmedia.com


Like Healthcare IT News on Facebook and LinkedIn

More regional news

A programmer using a computer.

(Photo by skynesher/GettyImages)

Tift Regional Medical Center sepsis IT

The new Tift Regional Medical Center expansion will open in the fall of 2021 in Tifton, Georgia. The 263,000-square-foot, four-story tower will include a new emergency center, inpatient units and new ICU. (Credit: Tift Regional Medical Center)

Want to get more stories like this one? Get daily news updates from Healthcare IT News.
Your subscription has been saved.
Something went wrong. Please try again.