Over 478K compromised in Covenant Health breach

SecurityWeek reports that Massachusetts-based Covenant Health had data from 478,188 people stolen in a May data breach previously claimed by the Qilin ransomware gang.

Attackers who infiltrated Covenant Health's systems on May 18 were able to nab individuals' names, birthdates, addresses, Social Security numbers, health insurance details, insurance data, and treatment information, said the Catholic nonprofit health organization in an updated filing with the Office of the Maine Attorney General on New Year's Eve.

Covenant Health's updated disclosure comes months after Qilin ransomware touted stealing an 850 GB data trove, which included more than 1.3 million files. Qilin has since exposed data purportedly stolen from the health system, which has providers in over a dozen locations across Massachusetts, Pennsylvania, Maine, Vermont, New Hampshire, and Rhode Island. Such a development comes amid a slew of healthcare breaches reported to have impacted at least 100,000 individuals.