Survival Flight reports second cybersecurity incident in less than a year

Survival Flight reports its second cybersecurity incident in less than a year, with the organisation stating that on July 17 it discovered an incident affecting its IT systems, disclosed in August via a substitute notice. The notice indicates that name, address, medical treatment information and health insurance information were likely exposed for certain patients, and that Survival Flight is working to determine the full extent of affected information.

The post notes that the incident does not reveal whether a ransom note was received and that WorldLeaks claimed to have acquired 2.8 TB of files, though the site is not currently accessible to DataBreaches to verify data leakage. The incident does not yet appear in HHS's public breach tool, so the total number of patients or people affected remains unknown, and it follows a previous October 2024 incident affecting 10,989 patients.

According to HHS, the 2024 event involved PHI including names, addresses, drivers’ licences and Social Security numbers, dates of birth, diagnoses, financial information and claims information, with the CE notified and additional safeguards implemented thereafter.