UCLA Health breach could affect 4.5 million patients

By Chad Hemenway on July 19, 2015

As many as 4.5 million people could be affected by a cyberattack suffered by UCLA Health.

Comprised of Ronald Reagan UCLA Medical Center, UCLA Medical Center, Santa Monica, Resnick Neuropsychiatric Hospital at UCLA, Mattel Children’s Hospital UCLA, and the UCLA Medical Group, UCLA Health said it has no evidence the hackers accessed personal or medical information but it continues to notify those who could have been affected.

The hospital administrative body said it is working with the FBI and hired a private computer forensic firm to monitor and secure network servers.

ALSO READ: Advisen Loss Insight: Healthcare and insurance cyber breaches

UCLA Health said it first saw suspicious activity back in October 2014 and called the FBI then but it didn’t appear cyberattackers has gained access to networks with personal and medical information.

UCLA Health continued: “As part of that ongoing investigation, on May 5, 2015, UCLA Health determined the attackers had accessed parts of the UCLA Health network that contain personal information such as names, addresses, dates of birth, Social Security numbers, medical record numbers, Medicare or health plan ID numbers and some medical information.

“Based on the continuing investigation, it appears that the attackers may have had access to these parts of the network as early as September 2014. We continue to investigate this matter.”

The hospital system is offering a year of identity theft and restoration services as well as additional personal health information protection.

Janet Napolitano, former Secretary of Homeland Security, is president of University of California university system, with its 5 medical centers, three affiliated national laboratories and 10 campuses.

ALSO READ: Advisen Loss Insight: Higher education, higher cyber risk

Chad Hemenway is Managing Editor of Advisen News. He has more than 15 years of journalist experience at a variety of online, daily, and weekly publications. He has covered P&C insurance news since 2007, and he has experience writing about all P&C lines as well as regulation and litigation. Chad won a Jesse H. Neal Award for Best Single Article in 2014 for his coverage of the insurance implications of traumatic brain injuries and Best News Coverage in 2013 for coverage of Superstorm Sandy. Contact Chad at 212.897.4824 or [email protected].