Veradigm Discloses Patient Data Breach After Gentlemen Ransomware Claim
Summary
Veradigm says a third-party vendor compromise exposed patient personal data through a limited API. The Gentlemen ransomware group claims it stole 3.5 million records; Veradigm is investigating and notifying affected people.
Key points
- Veradigm says an attacker used credentials obtained from a third-party vendor to access a limited customer-service API and copy patient data.
- The exposed information includes personal details and Social Security numbers for some patients; clinical and medical information was not affected.
- Veradigm reported no operational disruption and said the incident affected a small number of customers.
- The company notified law enforcement, is investigating the incident, and is notifying affected customers and individuals; credit monitoring is offered where applicable.
- The Gentlemen ransomware group claimed the attack and alleges it holds 3.5 million patient records, threatening to leak them if Veradigm does not negotiate a ransom.
- Veradigm has not confirmed the group’s claimed record count; its investigation is ongoing.
Article Details
- Victim Organization
- Veradigm
- Incident Type
- Third-party vendor compromise resulting in unauthorized access to a customer-service API and copying of patient data.
- Data Types Exposed
- Names
- Home addresses
- Social Security numbers
- Email addresses
- Phone numbers
- Personally identifiable information of patients or guarantors
- Affected Records
- The Gentlemen claimed to hold 3.5 million patient records; Veradigm did not confirm this figure.
- Operational Impact
- Veradigm said the incident did not disrupt operations and affected a small number of customers. Clinical and medical information was not affected. The investigation is ongoing.
- Ransom Or Extortion
- The Gentlemen threatened to leak the data by Friday, September 11, unless Veradigm engaged in ransom negotiations. The source does not report a ransom payment.
- Claim Status
- claimed