Columbus Regional Healthcare System, Inc.

Columbus Regional Healthcare System notified consumers of a security incident where unauthorized access occurred between May 19-21, 2023. The investigation concluded on December 28, 2023, revealing that full names and government identifiers were removed from the network. One Rhode Island resident was explicitly identified as impacted. The organization engaged outside cybersecurity professionals and offered credit monitoring services.

Affected (this filing):

Columbus Regional Healthcare System, a healthcare organization, experienced an external system breach (hacking) that occurred from May 19, 2023, to May 21, 2023. The breach was discovered on December 28, 2023. The incident affected 132,887 individuals in total, including one resident of Maine. The compromised information included names and Social Security Numbers. In response, the entity offered 12 months of identity theft protection services through Experian to those whose Social Security numbers were affected.

Columbus Regional Healthcare System reported to HHS on 2024-01-19 a Hacking/IT Incident affecting 132,887 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI including names, SSNs, diagnoses, and financial data. The CE offered free credit monitoring and implemented additional safeguards.

State AG filing by Columbus Regional Healthcare System submitted on 2024-01-24. The attachment text is empty, so no breach details, dates, or data types could be extracted.