Update: Gramercy Surgery Center attackers leaked patient data going back 20 years

DataBreaches reports that Gramercy Surgery Center in New York suffered a cyberattack attributed to the Everest Team, which leaked more than 460 GB of data on the dark web; review of samples shows extensive patient PHI (demographics, SSNs, medical and billing records) and weak security practices (shared simple passwords and an unprotected credentialing file with passwords and credit card data). Not all files were protected, many were scanned PDFs, and some CSVs dated back to 2004–2005; the incident was reported to HHS on August 9 as affecting 50,554 patients.