Breach

Excellus reported an 18-month systems’ hack in 2015, which impacted 10.5 million people. A proposed settlement requires the insurance giant to overhaul its security and data retention policies.

In 2020, EyeMed reported an email hack impacting 2.1 million patients. New York’s investigation into the healthcare data breach found a number of authentication and security findings.

This week’s breach roundup is led by Memorial Health System’s confirmation that patient data was possibly stolen during a ransomware attack that led to care disruptions in August.

Security analysts say if hackers will go after the Red Cross, they will attack any organization, especially non-profits with lists of wealthy donors.

Former Department of Homeland Security Acting Inspector General Charles Kumar Edwards has entered a guilty plea on charges tied to the theft of proprietary U.S. government software and databases, which contain personally identifiable information belonging to government employees.

BioPlus notified 350,000 patients that their data was accessed during a systems hack. A lawsuit provides further details of the incident, while blaming the breach on inadequate security.