INTEGRIS Health Data Breach Investigation
The Lyon Firm is investigating a data privacy incident on behalf of patients and plaintiffs with links to INTEGRIS Health. On December, 24, 2023, the company released a statement confirming a previously rumored cyberattack. Contact our legal team to discuss legal action if you receive a data breach notification letter from Integris.
What happened at Integris Health?
INTEGRIS Health recently discovered that it was the target of a cyberattack in which sensitive personally identifiable information in its systems may have been accessed and acquired.
An investigation has determined that an unauthorized actor may have accessed personal data in November 2023. Roughly a month later, the company posted a Notice of a Data Privacy Incident on its website, in which it encouraged patients not to respond to communications from the alleged hackers. The type of information potentially compromised includes the following:
- Name
- Social Security number
- Demographic information
- Date of birth
- Contact information
Integris Health patients have reportedly been receiving blackmail emails from the hackers, stating that their personal data was stolen in a cyberattack on the healthcare network. The bad actors claim that if they do not pay a ransom, their data would be sold on the dark web.
The hackers claim they stole the data of over two million patients in the attack. The stolen data allegedly includes Social Security Numbers, dates of birth, addresses, phone numbers, insurance information, and employer information. Reporters were informed by patients of Integris Health that these emails contained accurate personal information, confirming the hackers’ claim.
Integris Health is aware of the extortion emails sent to patients and has warned recipients not to respond to anything or click on any of the links in the email.
It is not known who is responsible for the attack, however, similar emails were sent to Fred Hutchinson Cancer Center patients after a Hunters International ransomware gang breach.
What Should You Do?
Contact a data breach lawyer following any ransomware or data theft incident to discuss your legal options and to learn more about how to protect yourself.
Victims are often tempted to pay a ransom to delete their personal data on the Web. But historically, previous extortion demands have proven that paying a ransom to cybercriminals does not always lead to the deletion of data. In fact, many victims who have paid a ransom have then been extorted further.
INTEGRIS Health is Oklahoma’s largest healthcare system offering a range of healthcare services, including primary care, cancer care, women’s health services, and heart and vascular care.
Contact our data privacy lawyers following a notice of data breach. You may be able to file a class action claim or join a class of plaintiffs to receive compensation and hold the responsible parties accountable.