Connect with us

Hi, what are you looking for?



Data Breach Hits 2.6 Million Atrium Health Patients

Hospital network Atrium Health informed patients on Tuesday that their personal information was compromised following a breach at technology solutions provider AccuDoc.

Hospital network Atrium Health informed patients on Tuesday that their personal information was compromised following a breach at technology solutions provider AccuDoc.

Atrium Health, formerly Carolinas HealthCare System, provides a wide range of healthcare and wellness programs in the Southeast of the United States through more than 40 hospitals and 900 care locations.

The organization learned on October 1 that AccuDoc, which provides billing and other tech services to the healthcare sector, had detected unauthorized access to its databases. These databases stored information related to payments made at several Atrium Health locations, including Blue Ridge HealthCare System, Columbus Regional Health Network, NHRMC Physician Group, Scotland Physicians Network, and St. Luke’s Physician Network.

Based on an investigation conducted by AccuDoc, the intruders had access to its systems for roughly one week between September 22 and September 29. The compromised databases stored personal information on patients and guarantors (i.e. the individual paying for a patient’s bill), including name, date of birth, address, insurance policy details, medical record number, invoice number, account balance, date of service and, in some cases, social security number.

The breached databases did not store medical or clinical records, bank account numbers, or payment card information, Atrium said. The company also claims there is no evidence that any data was actually stolen, or that any of the compromised information was misused.

It has been reported that the incident impacts roughly 2.65 million Atrium patients. Affected individuals are being notified by mail and have been advised to keep a close eye on their account statements and place a fraud alert on their credit file.

“Just when we thought things might be improving in healthcare data security, the Atrium Health Breach repositions 2018 as a record year for healthcare cyber attackers,” Pravin Kothari, CEO of CipherCloud, told SecurityWeek. “In the first half of 2017, approximately 1.6m+ healthcare records were reported as breached. In the second half of 2017 this number increased slightly to 1.7m+ healthcare records for a grand total in 2017 of about 3.4 million records. In the first half of 2018, we noted roughly 1.9+ million healthcare records breached.”

Advertisement. Scroll to continue reading.

“Now, with the Atrium Health breach the ball for the 2nd half of 2018 threatens to set a new half record with over 2.65 million patient records in just one reported event. The moral of the story? Healthcare security, both on-premise and in the cloud, has not caught up with best practices and likely won’t do so anytime soon,” Kothari added.

George Wrenn, CEO and founder of CyberSaint Security, also provided some interesting statistics.

“Naturally, scaling a business includes partnerships. It’s a matter of how to manage the risks that come with a rapidly growing vendor list. Seventy-five percent of mid-sized companies and enterprises expect their vendor list to grow by at least 20% this coming year and beyond. Third party risk management isn’t just a security problem anymore- these issues are making their way up to the Board because higher levels of risk deter business success and growth,” Wrenn said.

“If nothing else, unknown risks within a supply chain can fuel fear around expansion. According to Gartner, 75% of the Fortune 500 will treat Vendor Risk Management as a board-level issue by 2020, driven by uncertainty and the pressing need to manage risk.

“Every stakeholder should have easily accessible visibility into where risks lie within any given vendor list, and should be able to have the insights from that information to take meaningful action. There needs to be a better way to manage the growing risk that comes with expanding businesses,” he explained.

Related: Massive Singapore Healthcare Breach Possibly Involved Contractor

Related: Hackers Breach System, Get Data on 75,000

Related: Insurer Anthem Will Pay Record $16M for Massive Data Breach

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.


Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.


As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.


A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...


Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.