Norton Healthcare: 2.5M Victims in Extortion Attack

The large network of the Norton Healthcare clinics was targeted by large-scale cyber attacks, resulting in the leakage of data from more than two million individuals. Norton Healthcare, which includes dozens of clinics and hospitals in the states of Kentucky and Indiana, recently disclosed the incident involving a cybersecurity breach that impacted its internal systems.

The attack has been classified as a ransomware attack. The company promptly informed the FBI, managed to restore the systems from protected backups, and did not pay any ransom.

Norton Healthcare, the third largest private employer in the Louisville area, boasts a workforce of over 20,000 employees and more than 1,750 doctors. The organization operates in more than 140 locations in Louisville and Southern Indiana.

In a statement submitted to the General Maine prosecutor on Friday, Norton Healthcare revealed that the confidential data of approximately 2.5 million individuals was compromised during a ransomware attack that took place in May.

The non-profit organization sent a letter to the affected individuals, explaining that the hackers gained access to “certain network data storage devices” from May 7 to May 9. Fortunately, the attackers did not breach the Norton Healthcare medical documentation system.

However, personal data of current and former patients, employees, dependents, and beneficiaries was exposed. The stolen information includes names, contact details, dates of birth, social insurance numbers, medical information, insurance data, and medical identification numbers. The stolen data also includes driver’s license