Ascension discloses new data breach after third-party hacking incident

Ascension disclosed that patient personal and health information may have been stolen after the company inadvertently shared data with a former business partner that was likely compromised via a vulnerability in third‑party Cleo secure file transfer software in December 2024; the incident—tied to a series of Clop data theft attacks—exposed sensitive data (including SSNs and medical records) for tens of thousands of individuals and prompted offers of two years of identity monitoring for affected patients.