The Oregon Health Authority has disclosed that 1.7 million Oregon Health Plan members had their protected health information compromised following a data breach of its health data management services provider Performance Health Technology stemming from the widespread Cl0p ransomware attack involving the exploitation of a MOVEit Transfer vulnerability, TechCrunch reports. Aside from accessing Oregon residents’ names, birthdates, email and postal addresses, member and plan ID numbers, and Social Security numbers, Cl0p ransomware attackers were also able to obtain plan members’ diagnosis and procedure codes, insurance authorizations, claims data, and other sensitive health information, said PH Tech.
Source: SC Magazine