In December 2022, a medical organization faced a data breach due to a cyberattack. Malicious software was discovered on their servers, leading to unauthorized access and extraction of patient data. The organization responded by notifying affected individuals, improving security protocols, and providing credit monitoring services. This incident resulted in several lawsuits alleging inadequate protection of sensitive information.

How many accounts were compromised?

The breach impacted data related to 3 million individuals.

What data was leaked?

The data exposed in the breach included names, social security numbers, addresses, dates of birth, diagnosis and treatment information, laboratory test results, prescription data, radiology reports, Medicare ID numbers, health plan member numbers, and phone numbers.

How was Regal Medical Group hacked?

During the ransomware cyberattack on Regal Medical Group, hackers deployed malware on the organization's servers, enabling them to access and exfiltrate sensitive patient data. The exact method used by the threat actors to initially infiltrate the IT infrastructure remains unclear.

Regal Medical Group's solution

In response to the hacking incident, Regal Medical Group took several measures to secure its systems and prevent future breaches. These actions included hiring third-party vendors to assist with the response, implementing additional computer security protections and protocols, and notifying law enforcement, regulatory agencies, and the media. Regal Medical Group also provided affected individuals with one year of credit monitoring from Norton LifeLock at no cost. However, specific details about the enhanced security measures remain unclear.

How do I know if I was affected?

Regal Medical Group notified affected individuals about the breach. If you believe you may have been impacted but did not receive a notification, you can visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

• Change Your Passwords: Immediately update your passwords for all accounts that may have been compromised. Make sure the new passwords are strong and unique, not previously used on any other platform.

• Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

• Enable Two-Factor Authentication (2FA): Activate 2FA on your accounts, if available. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

• Monitor Your Accounts: Keep an eye on your financial and personal accounts for any suspicious activity. Report any unauthorized transactions or changes to the appropriate institutions immediately.

For more specific help and instructions regarding Regal Medical Group's data breach, please contact Regal Medical Group's support directly.

Where can I go to learn more?

If you want to find more information on the Regal Medical Group data breach, check out the following news articles:

• Three million patient records stolen in healthcare ransomware attack