UMMC is notifying patients their data may have been stolen when the hospital suffered a cyberattack in February. UMMC issued the following letter to patients last week:
The hacker group known as Medusa claimed in March it demanded ransomware of $800,000 during the attack. UMMC has provided little information on the cyberattack.
16 comments:
UMMC warns patients to remain vigilent; should't it be the other way around?
This is perfectly normal. In ransomware cases, you often end up at a place that you do not find signs of exfiltration, however, you do not have definitive evidence that something wasn't taken. Basically, you can't prove a negative, so you have statements like this.
UMMC is a state-owned institution and our tax dollars pay for it. We are entitled to know how much ransom money was paid.
We are entitled to know definitively from UMMC and the State of Mississippi if our personal data was breached.
We are entitled to know what, if anything, the State and UMMC are doing to protect us.
We rec'd one for father in law. He left this earth in 2014........
9:49 - No ransom was paid.
Hey 9:49, since there is no evidence of data being taken why don't you go make it your life's mission to enable your entitlement mindset by investigating for yourself. I'm sure you are better at cyber forensics than the professionals involved...
Shad White, where are you? Is this within your realm of auditing and criminal referral?
"we do not have evidence of" = we really don't f'ing know if your information has been used or not because there's millions of customers and we can't track any of them. When is the class action lawsuit?
My minor children each received a letter and offer to enroll in 12-months of free credit monitoring services. When you go to the website to sign them up, you can't because they have to be 18.
Guess we'll find out when they're 18 if they suddenly own a house in Dubai.
My wife received a letter. She has never been to UMMC. We thought it was a scam.
Years ago my company was hit with ransomware, and our situation was that the ransomware got both our data and our server room backups. This was before everything moved to cloud backup. We had to pay the ransom to get our data back. There was always the chance that we would pay and still not get it back, but we did. In the case of UMMC, my guess is they had a way to rebuild their databases from backups without paying the ransom, but they had to accept the likelihood of the data being sold to bad operators, hence the letter.
I've never been there and I got a letter before my wife got hers. She was an employee of UMMC and had been a patient. We figured they were contacting me because I was listed as NoK. Or they may have gotten into personnel records and found me for the same reason.
You mean that attack where it took six (6) months for a subcontractor to send out letters to their victims?
My sister received a letter. She passed several years ago.
I received the exact same letter from one my doctors.
( I always paid cash for what my insurance didn't cover so no credit was involved )
Two weeks later, this UMC letter addressed to Dad arrived.
My Father has been gone since 2012.
What got my attention was that he never once went to UMC.
He was always a Baptist, St. Dominic's and Forrest General patient.
Both letters ended with a "free trial offer" for a credit monitoring company.
My first thought was a marketing campaign.
Did he ever have dental work done at the School of Dentistry? My mother was never an actual patient at UMC but had dentures made at the School of Dentistry around 2013. We received the same letter last week. She passed away in 2022.
Post a Comment