Another massive US medical data breach after Fortra mass-hack

This year’s ransomware attack on a technology vendor stole another half a million people’s personal and health data.

In a notice filed with the Maine attorney general’s office, Tennessee-based Intellihartx, which handles patient payment balances and collections, said 489,830 patients’ information was stolen in the cyberattack targeting its vendor, Fortra.

The notice said hackers stole patient names, addresses, birth dates, and Social Security numbers. Medical billing, insurance, diagnoses, and medication were also compromised.

Intellihartx is the latest victim of the mass ransomware attack on Fortra’s GoAnywhere file-transfer software, which companies use to share large data sets online. The Clop ransomware group claimed responsibility for mass-exploiting a previously undisclosed security flaw in Fortra’s GoAnywhere software in February, affecting more than 100 companies and organizations, including digital financier Hatch Bank, security giant Rubrik, and the City of Toronto.

The cyberattack stole health data from millions of Americans, including children.

The U.S. Department of Health and Human Services warned that Clop was targeting the healthcare industry after its ransomware attack.

Clop has attacked Accellion’s file transfer appliance and Progress Systems’ MOVEit.