Memorial Hospital and Manor (Memorial) has reported a significant cybersecurity incident that impacted its computer systems, potentially exposing sensitive personal and health data of individuals. The breach primarily impacted individuals 120,085 individuals ,with only 3 residents from Maine affected.
Although there is no confirmed evidence of misuse at this time, affected individuals are encouraged to stay vigilant. It’s recommended to closely monitor financial accounts, update passwords, and be cautious of potential phishing attempts. For guidance on safeguarding your information after this incident, explore this resource on how to take action after a data breach and minimize potential harm.
Memorial Hospital and Manor Data Breach Details
The breach, which was identified on November 2, 2024, involved unauthorized access to certain computer systems at the 80-bed hospital, leading to the disruption of its Electronic Health Record (EHR) system.
Memorial’s antivirus software initially detected the threat, prompting a staff to investigate. By the time the breach was confirmed, the hospital had to shut down their digital systems and switch to manual operations, including pen-and-paper record-keeping. In response, Memorial launched an internal investigation and engaged an independent cybersecurity firm to assess the situation.
Investigators confirmed that an unidentified attacker gained unauthorized access to sensitive personal and health data, including names, Social Security numbers, birth dates, health insurance details, and medical treatment histories. Sources suggest the ransomware group Embargo was responsible for the breach.
Embargo Publishes Stolen Data
Although Memorial Hospital and Manor (MH-M) has not publicly acknowledged that patient data was leaked on the dark web, sensitive information has indeed been exposed. The Embargo ransomware group reportedly took responsibility, claiming they had obtained 1.15 TB of files and released them after MH-M refused to meet their ransom demands.
To support those affected, Memorial Hospital and Manor is providing complimentary credit monitoring and identity theft protection services through IDX, a data breach recovery firm. These services include 12 months of credit and CyberScan monitoring, a $1 million identity fraud loss reimbursement policy, and full identity theft recovery assistance.
