Toll of Georgia health firm hack exceeds 620K

Major Georgia-based healthcare firm ApolloMD, which has over 125 practices across the U.S., has reported the compromise of 626,540 patients' sensitive information following a cyberattack in May, which was later claimed by the Qilin ransomware operation, according to The Record, a news site by cybersecurity firm Recorded Future.

Initial disclosure of the incident in September revealed that the infiltration of ApolloMD's IT environment from May 22 to May 23 exposed the names, birthdates, addresses, Social Security numbers, diagnoses, treatments, service dates, and health insurance details of individuals served by the multispecialty physician services provider's affiliated doctors and practices. Healthcare has long been an attractive target for Qilin, which launched multiple disruptive intrusions against multiple hospitals across the U.S. last year and in the UK two years ago. Qilin was also noted by Cisco Talos researchers to be among the most prolific ransomware gangs after asserting attacks against nearly 40 organizations per month last year.