Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Data Breach at Shields Health Care Group Impacts 2 Million Patients

Shields Health Care Group has informed roughly two million individuals of a cybersecurity incident that potentially impacted their personal data.

The Massachusetts-based firm provides management and imaging services to more than 50 healthcare partners and facilities throughout New England.

Shields Health Care Group has informed roughly two million individuals of a cybersecurity incident that potentially impacted their personal data.

The Massachusetts-based firm provides management and imaging services to more than 50 healthcare partners and facilities throughout New England.

In a data breach notice published on their website, Shields said the incident was identified on March 28, 2022, but the intrusion actually happened between March 7 and March 21.

Although a security alert was triggered on March 18, the company did not find evidence of an intrusion at that time. The current investigation, however, showed that a third-party had unauthorized access to certain types of data.

Potentially impacted information, the company says, includes full names, addresses, birth dates, Social Security numbers, diagnosis, billing information, provider details, insurance number and information, patient ID, medical record number, and other medical data.

Shields says it secured the impacted systems immediately after learning of the incident, and also launched an investigation to determine the full scope of the breach.

The company’s notice does not include information on the number of potentially impacted individuals, but Shields informed the US Department of Health and Human Services (HHS) that two million patients were affected.

Shields reported the incident to HHS in late May, but the Department did not add it to its portal until this week, according to DataBreaches.

Related: Defending the Healthcare Security Landscape in the Age of Connected Devices

Related: Over 500,000 Patients Hit by Data Breaches at Healthcare Firms in Alabama, Colorado

Related: Healthcare Technology Provider Omnicell Discloses Ransomware Attack

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.

Register

Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.

Register

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Application Security

PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...