Ascension Seton suffered a data breach on its websites

Ascension Seton, an Austin hospital system, admits it suffered a data breach on two websites earlier this year. Experts explained that these incidents against healthcare websites could potentially expose certain users’ data.

Based on reports, the affected entity issued a statement earlier this week stating that its legacy websites, DellChildrens[.]net and Seton[.]net, suffered a breach on March 1 and 2. The hospital system further claimed that it has been working with a third-party vendor that manages the site to understand the entire scope of the security issue.

The third-party vendor of the hospital system has informed relevant law enforcement agencies and hired an outside forensic investigator to analyse the incident.

 

Troves of data could be at risk because of the attack on Ascension Seton.

 

The initial investigation conducted by Ascension Seton did not observe details of what data the incident compromised. However, researchers claimed personal information, such as names, addresses, Social Security numbers, credit card details, and insurance data, could be at risk if its users have input them on the breached websites.

Fortunately, the healthcare entity believes the incident failed to extract, share, or misuse the information. In addition, the hospital system said that the medical records systems remained unaffected during the illegal activity.

The organisation then assured everyone they would improve their information security to avoid any incidents that could cause worry.

Ascension has now taken down and replaced the affected websites. Additionally, the company has alerted individuals whose data suffered consequences during the incident. They will also receive identity theft and credit protection services from the company. Lastly, Ascension has established a dedicated assistance line for the people affected by the security breach.

Cybersecurity experts highlighted that cyber threats against healthcare entities and other related organisations have surged recently. Recent research found that ransomware campaigns targeting US-based healthcare systems doubled from 2016 to 2021.

Healthcare organisations should invest more in fortifying cybersecurity defences to avoid threats and prevent reinfection. These entities should also set up programs to help everyone be aware of cybersecurity threats.