Ascension Health filed a supplemental security breach notification with the Maryland Office of the Attorney General on February 3, 2025, supplementing a December 19, 2024 filing. The incident involved a ransomware attack detected on May 8, 2024, affecting approximately 5.47 million individuals nationwide, including 22,293 Maryland residents. Exfiltrated data included PHI, financial account numbers, government IDs, and PII. Ascension engaged cybersecurity experts, notified the FBI and CISA, and provided 24 months of credit monitoring and ID theft recovery services.
Affected (this filing): 5,466,931