3.3 million patients were impacted by a data breach from a ransomware attack on Heritage Provider Network

On Friday 10th of February 2023, the Heritage Provider Network in California confirmed that multiple medical groups within the network suffered a ransomware attack which exposed the data of 3,300,638 patients.

In the data breach notification on the U.S. Department of Health and Human Services breach portal, the Heritage Provider Network stated that the ransomware attack occurred on Thursday 1st of December 2022, with employees of the impacted medical groups noticing technical difficulties the following day.

The impacted medical groups later engaged with a third-party cybersecurity expert to conduct an investigation, where it was determined that the following data had been compromised:

• Full name
• Social Security Number (SSN)
• Date of birth
• Address
• Medical diagnosis and treatment
• Laboratory test results
• Prescription data
• Radiology reports
• Health plan member number
• Phone number

At this current time, no ransomware group has claimed responsibility for the attack.