HCA Healthcare says data breach may affect 11 million patients in 20 states

Jul 11, 2023, 9:39 AM

BOSTON (AP) — Medical giant HCA Healthcare, which operates 180 hospitals in the U.S. and Britain, says the personal data of about 11 million patients in 20 states may have been stolen in a data breach.

Samples of the data, including addresses, phone numbers, emails and birth dates, were posted to an online forum popular with cybercrooks by a hacker trying to sell them.

The Nashville, Tennessee-based provider said the stolen data was not believed to include Social Security numbers, payment information or clinical info such as diagnoses.

However, the data did include information on scheduled appointments and medical departments involved. A file dumped online by the hacker on Monday following what appeared to be a failed attempt to extort HCA includes nearly 1 million records from the company’s San Antonio division.

If 11 millions patients are affected, the breach were indicted in that case and there no evidence the stolen data was ever put up for sale.

The hacker, who first posted a sample of stolen data online on July 5, was trying to sell the data and was apparently attempting to extort HCA. It claimed to have 27.7 million records and set a Monday deadline.

A company spokesman did not immediately respond to an email asking if HCA received an extortion demand.

In a statement posted to its website on Monday, HCA said the data was stolen from “an external storage location” used to “automate the formatting of email messages.” HCA did not say when the data was stolen or when it learned of the theft.

The company said it would offer credit monitoring and identity theft protection “where appropriate.” It cautioned that patients should be wary of phone calls, emails and text messages.

HCA listed facilities in 20 U.S. states from Alaska to Virginia where people who received services might be affected.

In addition to hospitals, HCA Healthcare runs 2,300 ambulatory sites including surgery and urgent care centers and free-standing emergency rooms. It reports treating 37 million patients annually.

Health care is classified by the U.S. government as one of 16 critical infrastructure sectors, and health care providers are seen as prime targets for hackers.

United States News

Associated Press

Group of homeless people sues Portland, Oregon, over new daytime camping ban

PORTLAND, Ore. (AP) — A group of homeless people in Portland, Oregon, filed a class action lawsuit on Friday challenging new restrictions the city placed on daytime camping in an attempt to address safety issues stemming from a crisis of people living on the streets. The lawsuit filed in Multnomah County Circuit Court alleges the […]

3 hours ago

Associated Press

Guest lineups for the Sunday news shows

WASHINGTON (AP) — ABC’s “This Week” — Shalanda Young, director of the White House Office of Management and Budget; Rep. Mike Lawler, R-N.Y.; Chris Christie, a Republican presidential candidate. __ NBC’s “Meet the Press” — Preempted by coverage of golf’s Ryder Cup. __ CBS’ “Face the Nation” — Sen. Lindsey Graham, R-S.C.; Reps. Brian Fitzpatrick, […]

4 hours ago

Associated Press

An ex-investigative journalist is sentenced to 6 years in a child sexual abuse materials case

ALEXANDRIA, Va. (AP) — A former investigative journalist for ABC News was sentenced Friday to six years in federal prison for possessing and transporting child sexual abuse images. James Gordon Meek, of Arlington, Virginia, pleaded guilty in July, admitting in a plea agreement that he used an iPhone to exchange illicit materials during a chat […]

5 hours ago

Associated Press

Dad who won appeal in college admissions bribery case gets 6 months home confinement for tax offense

BOSTON (AP) — A former Staples Inc. executive whose fraud and bribery convictions in the sprawling college admissions cheating scandal were thrown out by an appeals court was sentenced on Friday to six months of home confinement for a tax offense. John Wilson, 64, of Lynnfield, Massachusetts, was sentenced in Boston’s federal appeals court months […]

5 hours ago

Associated Press

Court orders Subway franchise owners to pay workers nearly $1M – and to sell or close their stores

SAN FRANCISCO (AP) — A federal court ordered the owners of 14 Subway locations north of San Francisco to pay employees nearly $1 million in damages and back pay — and also to sell or shut their businesses, with any sale proceeds going to the Department of Labor. Federal investigators said franchise owners John and […]

5 hours ago

Associated Press

2 Indianapolis officers indicted for shooting Black man who was sleeping in his car, prosecutor says

INDIANAPOLIS (AP) — A grand jury has indicted two Indianapolis Metropolitan Police Department officers for shooting a Black man who was sleeping in a car parked outside his grandmother’s house, a prosecutor said Friday. Officers Carl Chandler and Alexander Gregory were indicted on battery and criminal recklessness charges in connection with the Dec. 31 predawn […]

6 hours ago

Sponsored Articles



Importance of AC maintenance after Arizona’s excruciating heat wave

An air conditioning unit in Phoenix is vital to living a comfortable life inside, away from triple-digit heat.

Sanderson Ford...

Sanderson Ford

Sanderson Ford congratulates D-backs’ on drive to great first half of 2023

The Arizona Diamondbacks just completed a red-hot first half of the major league season, and Sanderson Ford wants to send its congratulations to the ballclub.



Here are the biggest tips to keep your AC bill low this summer

PHOENIX — In Arizona during the summer, having a working air conditioning unit is not just a pleasure, but a necessity. No one wants to walk from their sweltering car just to continue to be hot in their home. As the triple digits hit around the Valley and are here to stay, your AC bill […]

HCA Healthcare says data breach may affect 11 million patients in 20 states