ASCENSION DISCLOSES NEW DATA BREACH AFTER THIRD-PARTY HACKING INCIDENT

Summary from the TLDR InfoSec newsletter

Ascension, one of the largest private healthcare systems in the US, is notifying patients that their data was stolen in a breach in December 2024. Ascension stated that the breach was caused by them inadvertently disclosing data to a business partner which the attacker then stole the data from via a vulnerability in third-party software used by the business partner. The disclosed data includes names, addresses, phone numbers, email addresses, dates of birth, race, gender, and Social Security numbers.