💰💣
Ascension Security Incident
2024
630 days ago
Resolved
Incident Overview
Situation Description
Ascension, a large healthcare system, experienced a significant ransomware cyberattack in 2024 that exposed the data of over 5.6 million patients and disrupted clinical operations.
Event Types
Ransomware
Malware / Destructive Attack
Industry Sector
HealthcareGeographic Scope
National (US)Response Actions
Isolated Compromised Systems
Took Systems or Services Offline
Restored Systems from Secure Backups
Engaged Third-Party Forensic Investigators
Fulfilled Formal Breach Disclosure Obligations
Notified Affected Individuals & Entities
Offered Post-Breach Remediation Services
Managed Public Narrative & Crisis Communications
Revised Incident Response Plan
Impact Analysis
Event Types (2 identified)
Ransomware
Malware / Destructive Attack
Financial Impact
$0 USDRecords Affected
5,600,000Data Types Compromised
PII (Personally Identifiable Information)
PHI (Protected Health Information)
Financial Data (Credit Cards, Bank Accounts)
Government Data
Credentials
Primary Impacts
Operational Disruption
Data Exposure
Financial Loss
Reputational Damage
Legal/Regulatory Penalties
Key Decisions Made
Ascension offered two years of free credit monitoring and identity theft protection services to affected patients.; Ascension worked with Mandiant to investigate and remediate the ransomware attack.; Ascension took critical electronic systems offline to contain the ransomware attack.
Technical Analysis
Attack Method
Phishing
Threat Actor Attribution
Black Basta
Additional Information
Quick Facts
- Company:
- Ascension
- Date:
- 2024
- Status:
- Resolved
- Decision Maker:
- nan
- Position:
- nan
- Published:
- 27/05/2025
Source Information
Original Query
healthcare provider ransomware attack "patient data" "notification letter"Timeline
Information Published
27/05/2025
Incident Occurred
2024 (630 days ago)
Status: Resolved
Estimated resolution based on age