Hackensack Meridian Health
Hackensack Meridian Health (HMH) faced a proposed class action lawsuit over a December 2019 ransomware attack.
Hackensack Meridian Health experienced on December 2, 2019 and the attack crippled the computer network used by the defendant’s 17 hospitals for two days.
It left facilities under the HMH umbrella unable to reschedule non-emergency surgeries and doctors and nurses were locked out of patient records.
HMH did not notified patients of the ransomware incident, nor did they reported the breach to the Department of Health and Human Services.
Those responsible had gained access to portions of their computer systems and made certain files unreadable via encryption, holding hostage a critical portion of HMH’s network.
It contained patient records and the case relays.
The attack compromised names, demographic details, dates of birth, Social Security and driver’s license numbers, employment data, and medical information protected by the Health Insurance Portability and Accountability Act of 1996—HIPAA.
"id": "HAC2023201222",
"linkid": "hackensackmeridianhealth",
"type": "Ransomware",
"date": "12/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"