Sutter Health Experiences Vendor-related Data Breach

No social security numbers or financial information were compromised in this incident.

By HFT Staff


Sutter Health has received notification that one of its vendors was affected by the MOVEit ransomware attack, leading to an unauthorized user gaining access and potentially extracting Sutter Health patient information. 

Welltok Inc., a Virgin Pulse company operates an online contact-management platform that enables Sutter Health to provide patients and members with important notices and communications. Based on the findings of Virgin Pulse’s investigation, it is estimated the personal information of approximately 845,441 Sutter Health patients may be impacted.  Importantly, Virgin Pulse can confirm social security numbers and financial information were not impacted by this incident. 

On Sept. 22, 2023, Virgin Pulse notified Sutter Health it had been impacted by the ransomware attack targeting the file transfer tool called MOVEit. Virgin Pulse confirmed it moved quickly to apply available patching, undertook recommended mitigation steps and launched an internal investigation, with the assistance of third-party cybersecurity specialists, to determine the potential impact of the vulnerabilities’ presence on the MOVEit Transfer server and the security of data housed on its server. Virgin Pulse states the investigation determined an unknown actor exploited vulnerabilities, accessed the MOVEit Transfer server between May 30, 2023, to May 31, 2023, and exfiltrated certain data from the MOVEit Transfer server during that time. On Oct. 24, 2023, Virgin Pulse provided Sutter Health with a final report on its investigation. 

Virgin Pulse has notified all impacted patients of this incident via mailed letters that include available services, resources and recommendations for patients to monitor any potential inappropriate use of their personal information. 



November 16, 2023


Topic Area: Information Technology , Security


Recent Posts

3 Employees Injured by Patient at Halifax Infirmary's Emergency Department

Police contained the threat and took the patient into custody.


How Architects Shape the Future of Healthcare Facilities

Healthcare architecture is more than just designing and building hospitals.


UNC Health, Duke Health Form Partnership for Stand-alone Children's Hospital

The partners plan to break ground together on the new NC Children’s campus by 2027.


Sarasota Memorial Hospital Plans to Build New Facility in North Port

The six-story, 100-bed hospital is slated to open in fall of 2028.


CMMS, Data and the Path to Compliance

Taking control of healthcare facilities data in CMMS enables managers to use it to ensure the efficient operation and maintenance of their assets.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

 
 
 
 

Healthcare Facilities Today membership includes free email newsletters from our facility-industry brands.

Facebook   Twitter   LinkedIn   Posts

Copyright © 2023 TradePress. All rights reserved.