Uintah Basin Healthcare

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

In November 2022, Uintah Basin Healthcare (UBH), a healthcare provider based in rural Utah, experienced a significant data breach that affected over 100,000 individuals. This cybersecurity incident was first detected due to unusual activity on UBH’s network, prompting an investigation that revealed hackers may have accessed or stolen patient data. The breach impacted patients who received care between March 2012 and November 2022, involving sensitive information such as names, Social Security numbers, addresses, health insurance details, diagnoses, medications, test results, and procedure information[1][2][4].

UBH has taken several steps in response to the breach, including notifying affected individuals, mandating a global password reset, deploying an endpoint detection and response tool, and enhancing the security of its digital environment to minimize the likelihood of future incidents. Despite these measures, the breach has raised concerns about the privacy and security of personal and protected health information, leading to investigations and potential legal actions against UBH[1][2][4].

The incident has been described as a severe risk to business for UBH, highlighting the challenges small rural health systems face in dealing with the aftermath of data breaches, including the financial and reputational damage[3]. Legal firms and data breach attorneys have begun investigating the incident, offering free consultations to affected individuals and exploring potential legal remedies[2][8][12]. This breach is part of a broader trend of increasing cybersecurity threats targeting healthcare providers, underscoring the importance of robust data protection measures in the healthcare industry[5].

Citations:

  1. https://www.bankinfosecurity.com/uintah-basin-healthcare-data-breach-affects-over-100000-a-22066
  2. https://www.myinjuryattorney.com/data-breach-at-uintah-basin-healthcare/
  3. https://logically.com/blog/hacks-attacks-and-breaches-impacts-on-healthcare-banking-and-manufacturing/
  4. https://healthitsecurity.com/news/utah-health-system-suffers-healthcare-data-breach-103k-impacted
  5. https://www.hipaajournal.com/may-2023-healthcare-data-breach-report/
  6. https://www.jdsupra.com/legalnews/uintah-basin-healthcare-posts-notice-of-9742029/
  7. https://ubh.org/terms-of-use/
  8. https://www.msdlegal.com/blog/2023/05/uintah-basin-healthcare-data-breach-class-action-lawsuit-investigation/
  9. https://www.hipaa.info/recent-email-account-breaches-and-cyberattacks-on-healthcare-providers/
  10. https://www.businesswire.com/news/home/20230525005844/en/Federman-Sherwood-Continues-Investigation-on-Uintah-Basin-Healthcare-for-Data-Breach
  11. https://www.linkedin.com/posts/richardstaynings_utah-health-system-suffers-healthcare-data-activity-7064230282698129408-bjue
  12. https://www.turkestrauss.com/2023/05/12/uintah-basin-healthcare-data-breach-investigation/
  13. https://www.pkware.com/blog/monthly-breach-report-june-2023-edition
  14. https://www.prnewswire.com/news-releases/uintah-basin-healthcare-provides-notice-of-data-security-incident-301821232.html
  15. https://www.idstrong.com/data-breaches/uintah-basin-healthcare-breach/
Breach Submission Date May 10, 2023
Converted Entity Name Uintah Basin Healthcare
Converted Entity Type Healthcare Provider
State UT
Individuals Affected 103,974
Breach Type Hacking/IT Incident

Breach Information Location Network Server

Business Associate Present Yes