Published
June 11, 2023
If you were ever a MercyOne patient in Clinton, Iowa, a ransomware breach may have exposed your medical records and Social Security number.
What Is the MercyOne Data Breach Investigation About?
MercyOne Medical Center is a group of medical clinics that serve the Clinton, Iowa area and the surrounding community. On May 12, 2023, MercyOne posted a notice on their website about a security breach to their internal computer system which exposed the information of 20,865 patients. If you have ever been a MercyOne patient in Clinton, Iowa, your most sensitive information could be in the hands of hackers already.As a result of the data breach, the information that may have been hacked and obtained can include some of the most sensitive and medical personally identifiable information such as medical records, social security number, and medical records as a result of the data breach hack.
MercyOne stated in a statement they released that they have taken "immediate" steps in order to remediate the data breach that resulted from the malicious Ransomware attack. The data accessed includes but is not limited to the following leaked information:
• Patients' Names
• Home Addresses,
• Driver's License Numbers,
• Bank Account Information,
• Medical Treatment Records,
• Medical Diagnoses,
• Admission and Prescription Information,
• Social Security Numbers,
• Personal Phone Numbers,
• Protected Health Information,
• Health Insurance Data,
• Other PII (Personally Identifiable Information)
Status
Active Investigation
attorneys are evaluating potential data-breach claims for MercyOne patients
People Affected
20,865 Patients
exposed in the ransomware attack disclosed May 12, 2023
Estimated Payout
Varies
no settlement or fund exists; any recovery would depend on the outcome
Proof Required
Yes
records showing you were a MercyOne patient in Clinton, Iowa
So What Is Ransomware, and How Does It Affect Me?
Imagine you're the guardian of a digital fortress. One day, a group of malicious hackers, armed with cunning tactics, infiltrate your fortress and take your digital treasures hostage. They do this by encrypting your precious files and locking you out of accessing them. Just like a skilled kidnapper, they demand a hefty ransom from you in exchange for the safe return of your files.This virtual kidnapping scenario is what we call ransomware. It's a type of malicious software designed to encrypt or lock down files on a victim's computer or network, rendering them inaccessible. The hackers then demand a ransom, usually in the form of cryptocurrency, in exchange for providing the decryption key or unlocking the files.
Ransomware can spread through various means, including phishing emails, compromised websites, or even exploiting software vulnerabilities. It's like a digital predator lurking in the shadows, ready to strike unsuspecting victims.
What Were the Biggest Ransomware Attacks in History?
JBS: In June 2021, JBS, one of the world's largest meat processors, suffered a ransomware attack. The REvil ransomware group was identified as the perpetrator. The attack resulted in the temporary shutdown of JBS's operations in North America and Australia, impacting meat supplies and causing concerns in the food industry. JBS was also the center of a recent open class action settlement.WannaCry: In May 2017, the WannaCry ransomware spread globally, infecting hundreds of thousands of computers in over 150 countries. It targeted computers running Microsoft Windows operating systems, encrypting files and demanding ransom payments in Bitcoin. WannaCry affected organizations such as the UK's National Health Service (NHS), causing widespread disruption to healthcare services.
NotPetya: NotPetya, which emerged in June 2017, initially masqueraded as a variant of the Petya ransomware. However, it was later revealed to be a more destructive malware aimed at causing disruption rather than generating ransom payments. NotPetya affected numerous organizations worldwide, including shipping giant Maersk, pharmaceutical company Merck, and Ukraine's government institutions.
Colonial Pipeline In May 2021, the Colonial Pipeline, a major fuel pipeline system in the United States, fell victim to a ransomware attack. The DarkSide ransomware gang was responsible for the attack, which led to the shutdown of the pipeline for several days. The incident caused fuel shortages and price increases along the East Coast of the United States.
Kaseya: In July 2021, a supply chain attack targeting the software provider Kaseya impacted numerous managed service providers (MSPs) and their clients. The REvil ransomware gang exploited a vulnerability in Kaseya's software, leading to the encryption of files on the networks of affected organizations. This attack affected thousands of businesses worldwide.
What makes ransomware particularly intriguing is its ever-evolving nature. Hackers constantly develop new techniques, refining their methods to outsmart cybersecurity measures. They adapt their tactics, creating unique strains of ransomware with captivating names like CryptoLocker, WannaCry, or NotPetya, making them sound like characters from a cyberpunk novel.
Ransomware attacks have targeted individuals, businesses, hospitals, and even government institutions, causing financial losses, disruption of services, and significant headaches for victims. The cat-and-mouse game between cyber-criminals and cybersecurity experts continues as they battle to protect the digital world from these digital hostage-takers.
You can find a curated list of data breaches published by the United States Department of Health and Human Services. These data breaches include events that impacted at least 500 people, and were reported, which impacted protected health information of those individuals. The U.S. government is required, by law, to update this list of medical information-related data breaches.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
For more open class actions keep scrolling below.
