Patient and Employee Data Exposed in June Ascension Cyberattack: New Details Released

Ascension disclosed that a May ransomware-related intrusion, initiated by a malicious file downloaded by an employee, led to unauthorized access and likely exposure of sensitive patient, senior-living resident, and employee information — including medical record numbers, dates of service, procedure codes, payment card and bank account details, insurance and Medicaid/Medicare IDs, and Social Security or driver’s license numbers. Ascension states EHR and core clinical systems were not affected, has completed its data review, will begin notifying affected individuals within weeks, and is offering two years of complimentary credit monitoring and identity protection.