After gaining unauthorized access to the state’s main program, which houses many health and individual solutions divisions, including social benefits, Rhode Island Governor Dan McKee has confirmed that cybercriminals are attempting to drip stolen data. WHY IT MATTERSMcKee’s department said Monday that, according to its expert Deloitte, the thieves who broke into the IT system for the country’s health and gains plans earlier this month have released a set of data on the dark web, WPRI reported. At least some of the information and data files from the Rhode Island Bridge were actually published online by cybercriminals now, according to McKee during a press conference. The state stated in a previous Deloitte statement that there is” a high likelihood that a fraudsters has obtained documents with personally identifiable information.” The consultant is collaborating with the position to create a list of impacted individuals. ” Once we have that knowledge, we may send letters to those people with instructions on how to get free record monitoring”, the update said. The Ocean State Department of Administration RIBridges system, which houses the state’s affordable health insurance market, is partially unavailable due to the attack that was announced on December 13. According to the state site, the system that Deloitte manages is the main operations system for the state’s management, including legal services, accounts and control, management and budget, purchasing, auditing, human resources, specific personnel services, capital asset management and maintenance, IT, energy resources and many domestic services. After Deloitte found the network intrusion, the state shut down the system. RIBridges also manages the state’s Medicaid, SNAP and other social programs, many of which have switched to manual processes. Due to the outage, HealthSource RI has extended open enrollment from Tuesday’s deadline until February 28 via call center. According to the website alert, patients who have plans that won’t renew automatically for 2025 will now be able to renew until the system is fixed so they can switch to new ones. About 650, 000 people, including Social Security and bank account numbers, were reportedly identified as having been hacked from the system, according to government officials. Databreaches. The ransomware group confirmed that they were responsible for the RIBridges attack and inspected the archive file using personal information provided by the threat actors, and it made contact with Brain Cipher. Reaching the threat actors ‘ dark web leak site is challenging, however, according to the story. They have been under a denial of service attack, according to Brain Cipher, who informed the publication to stop them from leaking the data. LARGER TRENDS State records systems that hold protected health information are targeted for cyberattacks, and criminals have been known to publish protected data. In July, RansomHub began leaking Florida Department of Health employee records, prescription data, screening information, Social Security numbers and more on a Tor-based leak site. The organization claimed to have accessed 100 gigabytes of data from the Sunshine State’s public health network. Healthcare cybersecurity challenges outpace every other sector, according to an analysis of 2023 cyberattacks by SecurityScorecard, a supply chain cybersecurity firm. The sector also leads in third-party data breaches, which snare providers, health plans, healthcare organizations and public health networks. Two years ago, a ransomware attack on a federal vendor, Healthcare Management Solutions, had the potential to impact up to 254, 000 Medicare beneficiaries. The U.S. Health and Human Services Office of Civil Rights is looking into a cyber breach that ultimately affected 3, 112, 815 people, according to a report from the Centers for Medicare and Medicaid Services in September, in addition to the vendor’s claim that it “violated its obligations.” One of the recent CMS data breaches was a result of a flaw in the file-transfer software MOVEit. In response to a question about the state’s ongoing relationship with Deloitte at Monday’s televised press conference, McKee said,” Our top priority is exactly what we talked about: informing people, getting the information out, having people protect their identity, and also getting those benefits out .” Andrea Fox, the senior editor of Healthcare IT News, said,” We will take those issues one day at a time.”
Email: afox@himss.org
Healthcare IT News is a HIMSS Media publication.