Two Ascension hospitals in Michigan have been added to the tally of CaptureRx data breach victims. The San Antonio-based health IT company notified the hospitals in April, making them part of eight hospitals and healthcare organizations that had patients' data exposed by a ransomware attack.
CaptureRx helps hospitals manage their 340B drug programs and said it discovered unusual activity in some of its files back in February. Compromised files contained patient records with protected health information, including names, birthdates and prescription details.
A list of hospitals and healthcare providers that have reported breaches stemming from the incident and the number of patients affected:
- Faxton St. Luke's Healthcare, an affiliate of Mohawk Valley Health System (Utica, N.Y.): more than 17,000
- Ascension Standish (Mich.) Hospital: 1,705
- Ascension St. Joseph Hospital (Tawas City, Mich.): 5,807
- Lourdes Hospital (Binghamton, N.Y.): unknown
- Gifford Health Care (Randolph, Vt.): 6,777
- UPMC Cole (Coudersport, Pa.) and UPMC Wellsboro (Pa.): 7,400
- Bayhealth (Dover, Del.): unknown
- Walmart: unknown