Last September, Trinity Health notified 3.3 million individuals that their PHI was potentially compromised in the Blackbaud incident. Trinity Health was affected by both the Accellion and Blackbaud incidents. 'The Accellion breach is unique from many others in that it represents a data compromise exposure by a company that specializes in the file sharing and collaboration - as compared to, for instance, Blackbaud’s primary work as a processor of payment or other transaction processing data,' says Jim Van Dyke, senior vice president of financial wellness at security vendor Sontiq.Ī 2020 attack on Blackbaud exposed the PHI of more than 11 million individuals. 'Within this group, fewer than 25 appear to have suffered significant data theft,' he notes. But it says fewer than 100 of approximately 300 FTA users were affected.

'Growing public awareness of new cybersecurity threats like ransomware along with increased government oversight is throwing sunlight on the pervasive vulnerabilities plaguing the infrastructure that supports healthcare’s information ecosystem.'Īn Accellion spokesman tells Information Security Media Group that the company is not breaking out by industry those customers affected by the FTA breach. 'New types of cyberattacks targeting service providers have dramatically increased the risk of compromise to health information impacting large segments of the industry,' says privacy attorney David Holtzman of the consulting firm HITprivacy LLC. Other organizations that have revealed in recent weeks that they were victims of the Accellion breach include Trinity Health, Stanford University School of Medicine, the University of California, and UC Davis.Įarlier, supermarket chain Kroger, Springfield, Illinois-based Southern Illinois University School of Medicine Trillium Community Health Plan based in Springfield, Oregon and Canada-based Nova Scotia Health Employees’ Pension Plan also confirmed they were victims. Health Net Life Insurance Co., with nearly 27,000 affected.California Health & Wellness, with 80,000 affected.Health Net of California, with 524,000 individuals affected.Health Net Community Solutions, with nearly 687,000 individuals affected.In the last few days, the Department of Health and Human Service's HIPAA Breach Reporting Tool website has added several large breaches tied to attacks on unpatched Accellion FTA installations.Īmong the latest victims added are health plans that are owned by Centene Corp., which recently filed a lawsuit against Accellion in the wake of the incident. Months after the December cyberattack on Accellion's File Transfer Appliance, the identities of more healthcare sector entities that were affected continue to come to light. See Also: Webinar | Prevent, Detect & Restore: Data Security Backup Systems Made Easy

Accellion file transfer appliance