Florida Health Sciences Center, Inc. dba Tampa General Hospital

Tampa General Hospital (TGH), a major healthcare provider in Florida, experienced a significant data breach that was first detected on May 31, 2023. The breach, which is one of the largest healthcare data breaches in Florida, resulted in unauthorized access to the hospital’s network between May 12 and May 30, 2023. During this period, hackers exfiltrated files containing sensitive patient information for up to 1.3 million individuals[1][2].

The compromised data included names, contact information, dates of birth, Social Security numbers, health insurance information, medical record numbers, patient account numbers, dates of service, and limited treatment information[1][2][4]. Notably, the hospital’s electronic medical record (EMR) system was not accessed during the breach[3][5][7].

The breach prompted legal action against TGH, with a class-action lawsuit filed by the law firm Morgan & Morgan on behalf of three plaintiffs, one of whom had already suffered identity theft as a result of the breach. The lawsuit alleges that TGH failed to implement appropriate security measures and criticized the hospital for the delay in detecting the breach and notifying patients. The plaintiffs are seeking damages, restitution, and injunctive relief[1][2][4].

TGH reported the incident to the FBI and took steps to restrict the unauthorized intrusion. The hospital also began an investigation with the assistance of a third-party forensic firm. In response to the breach, TGH implemented additional security tools and increased monitoring. Affected individuals were notified and offered complimentary credit monitoring and identity theft protection services[3][5][7].

The Snatch ransomware group claimed responsibility for the data theft on July 18, 2023. The group is suspected of operating from Russia, and the FBI is investigating the attack[3].

This incident was not the first data breach at TGH; a previous breach in 2014 affected 675 patients[1][2]. Following the 2023 breach, TGH emphasized its commitment to patient privacy and the continuous updating of its systems to prevent such events[5][7][11][15].

For those affected by the breach, TGH encouraged vigilance in monitoring financial accounts and healthcare statements for any unauthorized activity[6][7].

Citations:

1. https://www.hipaajournal.com/tampa-general-hospital-sued-over-1-2-million-record-data-breach/
2. https://www.tampabay.com/news/health/2023/08/08/tampa-general-hospital-faces-suit-over-data-breach/
3. https://www.paubox.com/blog/how-tampa-general-hospital-was-proactive-against-a-ransomware-attack
4. https://health.wusf.usf.edu/health-news-florida/2023-08-09/class-action-lawsuit-filed-against-tampa-general-hospital-over-recent-data-breach
5. https://www.malwarebytes.com/blog/news/2023/07/tampa-general-hospital-half-thwarts-ransomware-attack-but-still-loses-patient-data/amp
6. https://www.idstrong.com/sentinel/tampa-general-hospital-suffered-data-breach/
7. https://www.wfla.com/news/hillsborough-county/1-2-million-affected-by-tampa-general-hospital-data-breach/
8. https://www.infosecurity-magazine.com/news/tampa-hospital-data-breach/
9. https://www.beckershospitalreview.com/cybersecurity/how-tampa-general-hospital-thwarted-a-ransomware-attack.html
10. https://www.tgh.org/patients-visitors/joint-notice-privacy-policy
11. https://www.tampabay.com/news/health/2023/07/19/tampa-general-reports-confidential-data-12-million-patients-hacked/
12. https://www.securityweek.com/tampa-general-hospital-says-patient-information-stolen-in-ransomware-attack/
13. https://www.hipaajournal.com/july-2023-healthcare-data-breach-report/
14. https://www.bestlawyers.com/article/recent-cyberattacks-hit-tampa-area-hospital/5581
15. https://www.abcactionnews.com/news/region-hillsborough/cybersecurity-event-impacts-tampa-general-patient-information
16. https://trellis.law/doc/90165886/motion-to-for-defendant-florida-health-sciences-center-inc-d-b-a-tampa-general-hospital-s-motion-for-reconsideration-rehearing-denial-motion-to-dismiss-motion-to-strike-directed-to-sixth-amended-comp
17. https://www.fox13news.com/news/hackers-steal-personal-information-from-1-2-million-tgh-patients
18. https://topclassactions.com/lawsuit-settlements/closed-settlements/tampa-general-hospital-data-breach-class-action-settlement/
19. https://www.tgh.org/terms-of-use