Clarke County Hospital Confirms Data Breach

Clarke County Hospital (CCH) has confirmed it suffered a data breach in the attack launched on it by Royal ransomware last month. Security researchers noticed CCH on Royal ransomware’s data leak site on April 24. A week later, security researcher Dominic Alvieri noticed that Royal operators had reposted the Clarke County Hospital (CCH) listing and were actively leaking data.

CCH acknowledged the attack on May 17th, issuing a data breach notification saying that the attack “may have exposed” the personal information of current and former patients. "CCH has found no evidence that your information has been misused," the notification letter reads, "however, it is possible that the following personal information could have been acquired by an unauthorized third party: first name, last name, address, date of birth, health insurance information, medical record number, diagnostic information, and certain health information."