Access Sports Medicine & Orthopaedics is informing more than 88,000 individuals that their information has been compromised as a result of a cyberattack.
The New Hampshire-based orthopedics services provider said it discovered suspicious activity on its network on May 10, 2024. An investigation showed that there had been unauthorized access to files storing personal and health information.
The organization told the Maine Attorney General’s Office last week that the data breach impacts just over 88,000 individuals.
Access Sports said the exposed information includes names, Social Security numbers, dates of birth, financial information, medical information, and health insurance information.
Fraud protection services have been offered to impacted individuals.
“At this time, we have no evidence any of the information has been misused by a third party, but because information related to you was disclosed, we are notifying you out of full transparency,” Access Sports told impacted individuals.
However, a ransomware group named Inc Ransom has taken credit for the attack and it has already leaked a significant amount of information allegedly stolen from the healthcare organization.
Access Sports was listed on the Inc Ransom leak website in late May and the cybercriminals appear to have published all files obtained from the organization in mid-June. The hackers claimed to have obtained contracts, employee information, confidential documents, and financial data.
Inc Ransom emerged in July 2023 and has been known to target organizations in the healthcare, education, and government sectors, among others.
The cybercriminals may encrypt data on compromised systems, and they exfiltrate potentially valuable data in an effort to increase their chances of receiving a ransom payment.
Related: Healthcare Provider to Pay $65M Settlement Following Ransomware Attack
Related: 460k Impacted by Kootenai Health Ransomware Attack
Related: Ransomware Attack Hits OneBlood Blood Bank, Disrupts Medical Operations
Related: Ascension Says Personal, Health Information Stolen in Ransomware Attack
