NorthBay Health confirmed in a data breach report to regulators in the state of Maine last week that some 569,012 people had their financial, medical and health insurance details compromised in a ransomware attack last year, according to online cybersecurity news reports.
According to The Record, a news site by cybersecurity firm Recorded Future, the filing said financial, medical, and health insurance details, as well as Social Security numbers and passport and credit or debit card numbers were stolen following an Embargo ransomware group attack against NorthBay’s systems between Jan. 11 and April 1, 2024. Embargo is a relatively new group in the ransomware scene, according to online cybersecurity experts.
In April 2024, NorthBay posted a notice on its website about the disruption, referring to it as a “cyber incident.”
In a statement to media at the time, the nonprofit healthcare provider said, “Upon detecting this incident, we launched an investigation and engaged leading external cybersecurity experts to support our response. We are working diligently to restore systems as quickly and safely as possible.”
The healthcare system was forced to turn patients away and cancel appointments for a short time following the attack.
Asked for comment on Monday, the NorthBay issued a statement saying it “initiated an internal investigation, coordinated with law enforcement on identifying any unauthorized activity and engaged a leading forensic security firm to assist in the investigation and confirm the security” of its computer systems. That investigation confirmed that “an unauthorized third party gained access to certain files on NorthBay Health’s computer system,” the statement reads.
In addition, NorthBay said it sent notification letters to individuals identified as potentially being involved in the attack and for whom it had addresses, and included resources for complimentary identity protection and credit monitoring services in those notices.
“NorthBay Health takes our responsibility to safeguard personal information seriously and thanks the community for its continued patience and support as we have worked to address and investigate the issue,” the statement concludes.
Citing “pending litigation” a company official declined further comment.
NorthBay Health operates two hospitals in Solano County — NorthBay Health VacaValley Hospital in Vacaville and NorthBay Health Medical Center in Fairfield — as well as multiple primary and specialty care offices, Urgent Care locations, a cancer center and other facilities.