Community Health Systems Data Breach Affects Up to 1 Million Patients
February 14, 2023
Community Health Systems (CHS) has been impacted by a recent wave of attacks targeting a zero-day vulnerability in Fortra’s GoAnywhere MFT secure file transfer platform. The healthcare provider giant said on Monday that Fortra issued an alert saying that it had "experienced a security incident" leading to some CHS data being compromised. A subsequent investigation revealed that the resulting data breach affected the personal and health information of up to 1 million patients.
"With regard to the PHI and PI compromised by the Fortra breach, the Company currently estimates that approximately one million individuals may have been affected by this attack," said CHS in an 8-K filing with the SEC. The Clop ransomware gang claims to be behind these attacks and told BleepingComputer that they've breached and stolen data from over 130 organizations. The gang also said they had allegedly stolen the data over ten days after breaching GoAnywhere MFT servers vulnerable to exploits targeting the CVE-2023-0669 RCE bug. CHS is offering identity theft protection services and will notify all affected individuals whose information was exposed in the breach.
The Cybersecurity and Infrastructure Security Agency (CISA) added the GoAnywhere MFT flaw to its Known Exploited Vulnerabilities Catalog on Friday, ordering U.S. federal agencies to secure their systems within the next three weeks. "While that investigation is still ongoing, the Company believes that the Fortra breach has not had any impact on any of the Company's information systems and that there has not been any material interruption of the Company's business operations, including the delivery of patient care," said CHS.
Related News
- CISA Adds Three Flaws to Known Exploited Vulnerabilities Catalog
- Clop Ransomware Gang Claims to Have Exploited GoAnywhere MFT Zero-Day
Latest News
Like what you see?
Get a digest of headlines, vulnerabilities, risk context, and more delivered to your inbox.
