Indiana University hospital hacked to steal data

Malware may have allowed attackers to make off with the personal information of thousands of people connected to Indiana University Health Goshen Hospital.

How many victims? 12,374 job applicants and fewer than 500 patients.

What type of personal information? Names, addresses, and Social Security numbers of applicants, and Social Security numbers, insurance data and medical service information belonging to people who registered for  outpatient procedures and for the maternity unit.

What happened? On Dec. 22, a virus was discovered on a server. A security firm determined that hackers indeed did try to access the information, but it is unclear if they were successful.

What was the response? Letters were sent to victims, and the hospital plans to provide one year of free credit monitoring to them.

Source: chicagotribune.com, Associated Press, "N. Ind. hospital: Records may have been breached," Jan. 31, 2012. southbendtribune.com, "IU Health Goshen data hit by virus," Feb. 1, 2012.