Berlin, Md.-based Atlantic General Hospital has discovered that the data of 136,981 patients may have been compromised in a January ransomware attack.
In March, the hospital notified more than 30,000 patients that their information was caught up in the breach. But in May, Atlantic General determined that it may have underestimated the number by upward of 100,000, according to a June 23 filing with the Maine attorney general's office. The hospital started notifying the additional patients June 22.
The breached information included names, Social Security numbers, dates of birth, financial account and insurance information, and medical data such as physicians, diagnoses and treatments.
The cyberattack temporarily shut down some of the hospital's imaging, lab and pharmacy services, though the hospital's CEO said Atlantic General did not meet the hackers' ransom demands.