Fishers Dental Practice Reports Ransomware Attack Affecting Patient Records

Summary

Bright Smile Dental Care says ransomware found on its server affected patient records and software. Names and health and insurance information may have been involved; the practice reports no evidence of misuse or data theft.

Key points

• Bright Smile Dental Care says it discovered ransomware on its server on Aug. 3; patient records, practice management software and dental imaging software were affected.
• Potentially involved information includes names, contact details, dates of birth, insurance and health information, dependents’ information and, in some cases, Social Security numbers. The practice says financial information was not affected.
• The practice says the server data was encrypted, but it has no indication the attacker had the keys to view it or that patient information was misused. Its investigation found no sign of data copying.
• The practice hired cybersecurity consultants, is mailing notices to affected patients it can contact, notifying consumer reporting agencies and reviewing its security policies.
• Patients whose Social Security numbers may have been involved can receive free credit monitoring through TransUnion; the article also advises checking financial accounts and credit reports and considering a fraud alert or credit freeze.
• The notice does not state how many patients were affected or whether a ransom was demanded.