Sonoma Valley Hospital

Sonoma Valley Hospital suffered a ransomware attack on October 11, 2020, attributed to a Russian threat actor. The incident occurred between September 10 and October 11, 2020. Patient health information (PHI), including names, addresses, birthdates, insurer details, and diagnosis codes, was potentially disclosed. Employee data, including SSNs and health test results, was also compromised. Systems were shut down to contain the attack, and ransom was not paid. Enhanced security measures were implemented.