HCA Healthcare Inc.

bd_2da8bd258eae0806 · schema v1 · pii pii-v1

On July 10, 2023, HCA Healthcare, Inc. filed an Item 8.01 Form 8-K attaching a same-day press release (Exhibit 99.1) reporting a data security incident. HCA said it recently discovered that a list of certain information about some of its patients had been made available by an unknown and unauthorized party on an online forum. The list included patient name, city, state and zip code; email, telephone number, date of birth and gender; and service date, location and next appointment date, and did not include clinical information, payment information, or passwords, driver's license or social security numbers. HCA said this appears to be a theft from an external storage location used to automate the formatting of email messages, that it has not identified evidence of malicious activity on its networks or systems, and that patient care and day-to-day operations were not disrupted. The company reported the event to law enforcement, retained third-party forensic and threat intelligence advisors, disabled user access to the storage location as an immediate containment measure, and plans to contact impacted patients and offer credit monitoring and identity protection services where appropriate; it does not believe the incident will materially impact its business, operations or financial results.

J jump to incidentP pin to compareR raw source