200K+ MultiCare patients’ information concerned in ransomware assault

A data breach potentially exposed more than 200,000 patients, providers and staff at MultiCare via a tech vendor tied to Woodcreek Provider Services.

A data breach most likely exposed additional than 200,000 clients, vendors and personnel at MultiCare by way of a tech seller tied to Woodcreek Provider Solutions.

AP file, 2013

A health care apply management organization that presents help to MultiCare has alerted more than 200,000 clients, vendors and team of a ransomware attack of its tech seller, probably exposing individual data.

The information and facts was retrieved after an undisclosed ransom was paid out, in accordance to Woodcreek Provider Providers, in a public announcement issued March 9.

The assault was to start with described on industry tech blogs and beckershospitalreview.com.

Woodcreek Supplier Providers uses tech products and services organization Netgain Technologies.

According to details on Woodcreek’s site: “Woodcreek’s information and facts technology vendor, Netgain Know-how, knowledgeable a data breach secondary to a ransomware assault. According to Netgain Technology’s investigation, the breach happened someday among November 24 and December 3, 2020, though it is probable that access to Netgain’s techniques was as early as September 2020.”

“The server that contains Woodcreek’s medical records process was untouched nevertheless, scanned medical and financial knowledge and other small business documents on an archive server was stolen by the attackers,” the corporation claimed in its general public warn issued March 9.

“The data was returned after the ransom was paid and we have no purpose to believe that it has been or will be additional utilized or disclosed. On January 18, 2021, Woodcreek received a copy of the recovered information set and has been working diligently since then to notify afflicted individuals.”

The attack allowed access to own information on file. For employees, contractors, applicants, and vendors, that intended Social Protection quantities, dates of birth, lender account quantities, and extra.

For moms and dads/guardians who insure individuals of Woodcreek Healthcare or MultiCare Health Process: Total subscriber names and coverage plan numbers, according to Woodcreek.

On Feb. 17, counsel for Woodcreek notified the state Attorney General’s Business office that it would mail notifications to additional than 200,000 persons who likely ended up compromised.

According to the letter: “Woodcreek Service provider Expert services, LLC gives professional medical practice management and assist to various pediatric clinics and urgent treatment facilities owned and operated by MultiCare Health and fitness Technique, which includes certain clinics that had been earlier owned and operated by Woodcreek Healthcare.”

MultiCare, based mostly in Tacoma, experienced no fast comment when contacted Tuesday morning by The Information Tribune.

This is a creating story.

Profile Image of Debbie Cockrell

Debbie Cockrell has been with The Information Tribune since 2009. She reviews on organization and progress, community and regional issues.