How many victims? Approximately 5,454 patients were affected by the breach

What type of information? The breach only affected patient who received vascular and or thoracic treatment between 2012 and 2015. Of these patients, names, medical record numbers, dates of birth, social security numbers, procedure information, demographic information and medications were compromised.

What happened? Attackers reportedly targeted an unnamed third party vendor Sentara and law enforcement were notified about the breach on Nov. 17, 2016.

What was the response?  An investigation including law enforcement, the vendor and a cybersecurity firm has been launched into the incident and those who were affected have been notified and will be offered one year of credit monitoring and identity theft protection.  

Quote: “"A total of 5,454 vascular and/or thoracic patients were impacted, with the majority of patients being in the Hampton Roads area,” a Rockingham County spokesperson told WHSV. “Sentara is working with law enforcement, the vendor and a leading cybersecurity firm to investigate the incident.”

Source: Health Data Management, Associated Press via WHSV