PIH Healthcare Data Breach Claims 17 Million Identities Featured
Hackers claim to have stolen health records belonging to 17 million PIH Healthcare patients in December ransomware attack.
Attorneys are currently evaluating whether a class action lawsuit will be filed against Southern California regional healthcare provider, PIH Health, after announcing its network was breached by cyber criminals, bringing its entire operation to a standstill.
What Happened?
On December 1, 2024, PIH Health experienced a ransomware attack that compromised its computer and phone systems across multiple locations, including PIH Health Downey Hospital, PIH Health Good Samaritan Hospital, PIH Health Whittier Hospital, urgent care centers, doctor’s offices, and home health and hospice services. The attack caused system-wide outages, including patient health records, laboratory systems, pharmacy, radiology, and registration tools. Internet access and most phone systems were also disrupted.
What Information was Stolen?
Hackers claimed to have accessed and stolen 17 million patient records and approximately 2 terabytes of data, including highly sensitive personal, medical, and organizational information.
The data allegedly stolen includes:
- Patient Information:
- Personal and medical records for 17 million patients.
- Home addresses, phone numbers, places of employment, and medical expenses.
- Confidential diagnoses, test results, treatment details, patient photos, and scans.
- Private emails between patients and PIH about treatments and test results.
- Medical Records:
- Data for over 8.1 million medical episodes.
- Treatments for patients with critical diagnoses, including cancer.
- Monthly oncology reports and profitability details.
- Organizational and Confidential Data:
- About 100 active nondisclosure agreements with medical organizations.
- Confidentiality agreements with employees.
PIH Health posted FAQs on its website regarding the ransomware attack.
What is PIH Health Doing To Protect My Identity?
According to the information posted on PIH Healths’ website, it is currently working with the assistance of third-party cyber forensic specialists to identify the nature and scope of the cyberattack. It does not have any further information about the breach at this time. If the investigation determines that any protected health information is compromised, those impacted will be notified immediately.
What Can Hackers Do With My Information?
Stolen PII and PHI can be used to commit identity theft, open new credit accounts, make unauthorized purchases or obtain loans. Cybercriminals have recently targeted America’s essential industries and in so doing have forced millions of Americans to face the fallout from these attacks.
Leaked or stolen data can be sold on the dark web forums and may be used for fraud and medical identity theft, a type of fraud, where threat actors use stolen information to submit forged claims to insurers.
Clients affected by the breach are exposed to a heightened and imminent risk of fraud and identity theft. They must now and in the future closely monitor their financial accounts to guard against identity theft and fraud.
If you receive a data breach notification from PIH Health it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options at no cost to you. For more information, please review these recommendations.
Protect Your Identity. Join the PIH Health Data Breach Class Action.
The lawsuit alleges that PIH Health breached its duties under common law and the Federal Trade Commission Act to implement reasonable security measures, comply with industry standards and federal data-security regulations, encrypt sensitive data, and provide adequate and timely notice of the breach.
If you receive a notification letter from PIH Health, you are at permanent risk of identity theft and the devastating financial and legal consequences that go along with it.
You may be eligible to participate in a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
The lawsuit looks to cover anyone in the USA whose private information was compromised by the breach announced by PIH Health on December 1st, 2024.
Please complete the form shown on this page and a data breach attorney will contact you. There is no cost to you.