NextGen Healthcare Data Breach: One Million Patient Records Affected

Digital health file software program company NextGen Healthcare has confirmed that hackers breached its programs and stole the own information of additional than one particular million clients.

In accordance to a facts breach notification from the Business of the Maine Attorney Basic, a whole of 1,049,375 clients ended up affected by the attack.

The notification specifies that the details breach transpired between March 29 and April 14 2023, and was discovered by the enterprise on March 24 (even though a sample of a notification letter sent to affected buyers on April 28 stated NextGen only seen the breach on March 30).

In accordance to the organization, the breach stemmed from unauthorized access to a database resulting from customer qualifications allegedly stolen from other resources or incidents unrelated to NextGen.

“An unfamiliar 3rd-party attained unauthorized entry to a restricted set of electronically stored own data,” reads the letter. “As a end result of our thorough examination of the data impacted, we recently decided that particular of your personal details was involved in the digital knowledge accessed all through the incident.”

Go through additional on health care details breaches: KillNet Team Uses DDoS Attacks From Azure-Based mostly Health care Apps

The affected information and facts incorporates title, day of beginning, address and social security amount. NextGen said there was no proof of any obtain or impression on users’ health or medical information.

However, according to Tom Kellermann, SVP of cyber strategy at Contrast Security, the breach will very likely consequence in common identity theft.

“Healthcare suppliers have extended been chosen targets by cyber-criminals specializing in id theft for two factors: initially, they have woefully inadequate cybersecurity, and second, they retail store the most sensitive PII [personally identifiable information].” 

Dror Liwer, the co-founder of cybersecurity company Coro, echoed Kellermann’s perspective, introducing that the risk of credential theft and misuse can be considerably diminished by means of a basic password administration policy and multi-factor authentication.

“Moreover, deploying smart, automated detection and remediation would have diminished the attacker’s activity window to a portion of the time they had been able to access client info,” Liwer added.

The NextGen Health care information breach arrives months just after the US Foods and Drug Administration (Fda) released new rules to improve the cybersecurity degrees of internet-linked items used by hospitals and health care providers.

Some pieces of this write-up are sourced from:
www.infosecurity-journal.com