Feeds

Ohio child hospital hack exposes 230,000 files

Overly patient response

Protecting against web application threats using SSL

Hackers broke into the systems of an Ohio hospital last month raising fears that the personal details of up to 230,000 patients or their family members, and banking information on around 12,000 financial donors, might have been compromised.

News of the attack came after Akron Children's Hospital began notifying families last week, around seven weeks after the security breach was identified.

The attack came as the hospital upgraded its systems. It's unclear whether or not data obtained by the hackers was subsequently abused to conduct ID theft or other scams.

In a statement on the attack, the hospital said external security consultants "have found no evidence that any specific data was downloaded, tampered with, or compromised; however, the opportunity to view the data existed".

The breach was discovered on 6 September but hospital officials failed to contact FBI investigators until 20 October, according to US reports. Security consultants initially told the hospital that the breach wasn't significant and it wasn't until the full scale of the problem became apparent that the Feds were called. Notification to potential victims didn't begin until another expert compiled a list of possible marks.

The hospital said it had beefed up its security defences to guard against future attacks.

The attack is the latest of a series of attacks against US organisations that have exposed people's personal or financial information over the last two years. According to the Identity Theft Resource Centre, there were 151 such incidents across the US last year, potentially exposing the details of more than 57.7m people. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.