On May 31, 2023, Tampa General Hospital (TGH) detected unusual activity on their computer systems. TGH immediately took steps to contain the activity and began an investigation with the assistance of a third-party forensic firm. Fortunately, TGH’s monitoring systems and experienced technology professionals effectively prevented encryption, which would have significantly interrupted the hospital’s ability to provide care for patients. However, the investigation determined that an unauthorized third party accessed TGH’s network and obtained certain files from its systems between May 12 and May 30, 2023.
TGH reported the event to the FBI and provided information to support its investigation of the criminal group responsible.
TGH reviewed the files involved and determined that some patient information was included. The information varied by individual, but may have included names, addresses, phone numbers, dates of birth, Social Security numbers, health insurance information, medical record numbers, patient account numbers, dates of service and/or limited treatment information used by TGH for its business operations. TGH’s electronic medical record system was not involved or accessed.
The hospital is continuously updating and hardening systems to help prevent events such as this from occurring and has implemented additional defensive tools and increased monitoring.
TGH will be mailing notification letters to individuals whose information may have been involved in this event and is also providing individuals whose Social Security number was involved with complimentary credit monitoring and identity theft protection services. Patients are encouraged to review statements from their health insurer and healthcare providers, and to contact them immediately if they see any services they did not receive.