According to sources, Atrium Health (a Medical organization in North Carolina) was hit with a cyber attack. It was first reported on 2024-09-16.
Source 1 | 2024-09-16
“Charlotte, NC-based Atrium Health, a healthcare provider with 40 hospitals and more than 1,400 care locations in North Carolina, South Carolina, Georgia, and Alabama, has discovered unauthorized access to several employee email accounts. “
“The unauthorized email account access was detected on April 29, 2024. Its email environment was secured, and a forensic investigation was conducted to determine the nature and scope of the unauthorized activity. The investigation confirmed that an unauthorized third party accessed a limited number of employee email accounts as a result of a phishing campaign“
“ The phishing emails appeared to have been sent by a trusted source and several employees responded and inadvertently disclosed their account credentials, allowing their accounts to be accessed by an unauthorized individual for a short period between April 29 and April 30, 2024.“
“The exposed data varied from individual to individual and included first and last names in combination with one or more of the following: address, email address, phone number, date of birth, Social Security number, medical record number, driver’s license/state ID number, government/employer identifier, bank/financial account number/information, including routing number, financial institution name, security code/PIN and/or expiration date, treatment/diagnosis, prescription, health insurance and/or treatment cost information, patient identification number, health insurance account/policy number, incidental health references, billing identification number, access credential, and/or digital signatures.“
Guarding Against Hacking
Cybersecurity for Critical Infrastructure
SecuLore provides Managed Detection and Response (MDR) to protect our nation’s critical infrastructure from cyber threats. Our expertise is built on deep knowledge of 9-1-1 technology, cyberwarfare, and ethical hacking, ensuring the highest level of cybersecurity for public safety agencies.
