New York Healthcare Provider PMG Reports Data Breach Affecting 282,075 Patients

New York healthcare provider Premier Medical Group (PMG) is notifying 282,075 individuals that attackers accessed files containing personal and medical information. The incident occurred in June, when some of PMG’s systems were disrupted; the provider said its investigation found that the attackers accessed certain files on 14 June. PMG serves patients across cardiology, dermatology, gastroenterology, neurology, plastic surgery, gynaecology and internal medicine through offices in New York’s Hudson Valley.

The exposed information may include names, contact details, dates of birth, treatment and diagnostic information, medication details, health insurance information, dates of service, provider names and internal patient identification numbers. PMG advised affected patients to review statements from their healthcare providers and health insurers, and to contact the relevant provider or health plan immediately if they identify services they did not receive.

The provider has not disclosed how the attack happened or identified those responsible. SecurityWeek said it had found no known ransomware or extortion group claiming responsibility. The US Department of Health and Human Services has added PMG’s breach to its public reporting portal.