New York hospitals’ patient data impacted by cyberattack

CBS News reports that New York-based health providers HealthAlliance Hospital, Margaretville Hospital, and Mountainside Residential Care Center, which are under the Westchester Medical Center Health Network, had their patients' data compromised in an attack against their IT network that spanned nearly two months. HealthAlliance, which serves as the facilities' parent, disclosed that its IT network was infiltrated between Aug. 18 and Oct. 13, enabling threat actors to exfiltrate patients' names, birthdates, addresses, and Social Security numbers, as well as their health insurance details, medications, diagnoses, treatment information, and financial data. While all the health providers have been impacted by days-long disruptions that prompted the diversion of patients to other WMCHealth facilities, operations have been completely restored by Oct. 21. Such details have emerged weeks after Tennessee-based Ardent Health Services reported a Thanksgiving week ransomware attack that impacted more than 230 health providers across six states.