Time’s Up: Ransomware Group Claims 150,000+ Cardiology Patient Records. We’ve Seen the Data.

DataBreaches reported that the criminal group Orova breached Cardiology Associates of Port Huron, exfiltrating a large dataset (revised to ~496 GB / ~256,382 files) containing protected health information for 150,000+ patients — including SSNs, insurance and remittance statements, medical records, and DICOM radiology images — and that the password for the archived tranche may soon be released, making wide public exposure imminent and creating HIPAA notification and patient risk implications.