Austin Cancer Center

Austin Cancer Centers (ACC) experienced a ransomware attack on July 21 after which they immediately shut down their systems and contacted law enforcement.

An unauthorized user reportedly used “sophisticated technology” to remain invisible in the system and compromised certain information.

The compromised information included first name, last name, address, date of birth, social security number, diagnosis, diagnosis code, current procedural terminology codes, insurance carrier name, condition, lab results, medication, or other related information of about 36,503 patients.

The ACC manually maintain operations as they handled the atatck.

Source: https://www.databreaches.net/two-more-ransomware-attacks-on-medical-entities-impact-56000-patients-in-florida-and-texas/

TPRM report: https://scoringcyber.rankiteo.com/company/austin-cancer-centers

"id": "aus22825123",
"linkid": "austin-cancer-centers",
"type": "Ransomware",
"date": "07/2021",
"severity": "75",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 36503,
                        'industry': 'Healthcare',
                        'location': 'Austin',
                        'name': 'Austin Cancer Centers',
                        'type': 'Healthcare'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 36503,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['personal information',
                                              'health information']},
 'date_detected': '2023-07-21',
 'description': 'Austin Cancer Centers (ACC) experienced a ransomware attack '
                'on July 21, after which they immediately shut down their '
                'systems and contacted law enforcement. An unauthorized user '
                'reportedly used sophisticated technology to remain invisible '
                'in the system and compromised certain information, including '
                'first name, last name, address, date of birth, social '
                'security number, diagnosis, diagnosis code, current '
                'procedural terminology codes, insurance carrier name, '
                'condition, lab results, medication, or other related '
                'information of about 36,503 patients. The ACC manually '
                'maintained operations as they handled the attack.',
 'impact': {'data_compromised': ['first name',
                                 'last name',
                                 'address',
                                 'date of birth',
                                 'social security number',
                                 'diagnosis',
                                 'diagnosis code',
                                 'current procedural terminology codes',
                                 'insurance carrier name',
                                 'condition',
                                 'lab results',
                                 'medication',
                                 'other related information']},
 'ransomware': {'data_exfiltration': True},
 'references': [{'source': 'Cyber Incident Description'}],
 'response': {'law_enforcement_notified': True},
 'title': 'Ransomware Attack on Austin Cancer Centers',
 'type': 'Ransomware Attack'}