Cyberattack on Singing River Health System Impacted 895,000 Individuals

Mississippi-based Singing River Health System (SRHS) disclosed in an update shared with the Maine Attorney General that last year’s data breach affected 895,204 people. Security Affairs’ Pierluigi Paganini reported on May 15 that SRHS reported the data breach on September 13, 2023 and announced in December of 2023 that the breach impacted 252,890 individuals.

Paganini reported in September 2023 that the ransomware attack occurred in August 2023 and disrupted the systems of multiple hospitals. Ransomware group Rhysida claimed responsibility and is believed to have breached several health systems in 2023. The ransomware gang has leaked roughly 80 percent of the data they claim to hold, allegedly including 420,766 files totaling 754 GB, according to reports from The IT Nerd.

SRHS offered impacted people several months of credit monitoring and identity restoration services. In a news release on the organization’s site dated May 13, SHRS stated it was not aware of any individual information to have been leaked.

In recent weeks, SHRS has also been experiencing payment processing issues due to the cyberattack on Change Healthcare. On Mar 29, local news station WLOX reported that SHRS was notified that Change Healthcare would no longer process payments for Singing River.