Kentucky-based Norton Healthcare began notifying about 2.5 million of its customers that ransomware actors obtained their personal information during an extortion incident in May 2023.

• Norton Healthcare stated the attackers gained unauthorized access to their network storage systems for a period of two days. The attackers exfiltrated files containing personal information of current and former patients, employees, and dependents. Norton did not pay a ransom to the attackers.
• In November, Norton announced that it determined the exact types of information that were compromised in the incident. These included names, contact information, dates of birth, Social Security numbers, medical identification numbers, and health insurance information. In fewer cases, the ransomware actors obtained the government ID numbers, financial information, and digital signatures of some users.

Read More:

https://www.securityweek.com/norton-healthcare-ransomware-hack-2-5-million-personal-records-stolen/