ASCENSION REVEALS PERSONAL DATA OF 437,329 PATIENTS EXPOSED IN CYBERATTACK

Summary from the TLDR InfoSec newsletter

Ascension, the second-largest private healthcare system in the US, suffered a data breach that exposed the personal and health information of 437,329 patients through a former partner's compromise. In December 2024, the partner faced a security incident due to a vulnerability in third-party software, leading to the theft of sensitive data, including names, contact details, SSNs, and medical visit records. This marks Ascension's second major cybersecurity incident, following a Black Basta ransomware attack in May 2024, prompting the company to offer affected patients two years of free identity monitoring.