Sonoma Valley Hospital

Sonoma Valley Hospital suffered a ransomware attack on October 11, 2020, believed to be conducted by a Russian threat actor. The incident resulted in the potential disclosure of patient health information, including names, addresses, birthdates, and diagnosis codes. The hospital shut down systems, engaged forensic experts, and notified law enforcement.

Sonoma Valley Hospital reported a data breach to the Oregon Attorney General. The breach was reported on 2020-12-11. The breach occurred during 9/10/2020 - 10/11/2020. The breach was discovered on 11/20/2020. 69,000 individuals were affected. Notice was sent on 12/10/2020.

Sonoma Valley Hospital suffered a ransomware attack on October 11, 2020, attributed to a Russian threat actor. The incident occurred between September 10 and October 11, 2020. Patient health information (PHI), including names, addresses, birthdates, insurer details, and diagnosis codes, was potentially disclosed. Employee data, including SSNs and health test results, was also compromised. Systems were shut down to contain the attack, and ransom was not paid. Enhanced security measures were implemented.

Sonoma Valley Hospital disclosed that surgical service information, including patient names, dates of service, procedures, surgeon names, hospital charges, and insurance company names, was accidentally posted on its website from February 14, 2013, to April 17, 2013. The hospital became aware of the disclosure on April 17, 2013, and immediately removed the file. The incident involved protected health information (PHI) but did not include social security numbers, driver's licenses, or addresses. The investigation is complete, and remediation processes were initiated.

Sonoma Valley Hospital reported to HHS on 2013-05-24 a breach of type 'Other' affecting 1386 individuals. Breached information located on Other.