Anna Jaques Hospital ransomware breach exposed data of 300K patients

Anna Jaques Hospital disclosed a ransomware incident by the 'Money Message' group that began December 25, 2023; threat actors publicly extorted the hospital in January 2024 and released all stolen records on January 26, ultimately exposing personal, medical, insurance, Social Security, driver’s license and financial information for 316,342 patients. The hospital contained affected systems, launched a forensic investigation completed November 5, 2024, notified impacted individuals beginning December 5, 2024, and offered 24 months of identity protection and credit monitoring.