Scripps Health

Scripps Health, a California healthcare provider, reported a ransomware attack affecting the PHI of 1,267,639 individuals. Compromised data included names, Social Security numbers, dates of birth, addresses, driver's license numbers, diagnoses, and other treatment information. Scripps notified HHS, affected individuals, and the media, posted substitute notice on its website, and implemented additional administrative and technical safeguards.

Affected (this filing): 1,267,639

Scripps Health reported a cybersecurity incident where an unauthorized person gained access to its network, deployed malware, and acquired copies of documents containing patient PII and PHI. The incident occurred on April 29, 2021, and was discovered on May 1, 2021. Affected data included names, addresses, DOBs, SSNs, driver's licenses, and medical records. No fraud indication was found. Remediation included security enhancements and credit monitoring offers.