Pacific HealthWorks Data Breach: 1.4M Patient Records Exposed

Pacific HealthWorks has suffered a devastating data breach that compromised sensitive medical data belonging to over 1.4 million patients.

The Everest ransomware group claims responsibility for this massive breach, threatening to publish private patient information from more than 50 medical organizations unless their demands are met.

What Happened in the Attack

The Southern California-based company serves more than 1,200 physician groups across hospital emergency rooms, ICU departments, and anesthesia services.

Hackers targeted both Pacific HealthWorks and its sister company La Perouse, posting proof of the attack on dark web leak sites.

The cybercriminals have published hundreds of file samples containing highly sensitive information from at least 50 medical organizations.

These samples include patient names, Social Security numbers, addresses, medical records, insurance details, and billing information.

Scale of the Data Compromise

Pacific HealthWorks operates an extensive network spanning:

• Over 70 operating entities
• 1,200 medical clinics and physician groups
• Services for 1.4 million patients annually

The leaked samples also contained data from connected companies including Emergent Medical Associates, Benchmark Hospitalists & Intensivists, and AnesthesiaWorks.

Approximately 5,000 individuals have already viewed the victim posts on dark web forums.

Everest Ransomware Group Responsible

The Everest Ransomware Group is a Russian-linked criminal organization first appeared in July 2021 and has claimed 248 victims since 2023.

The group has recently targeted high-profile companies including Mailchimp, Crumbl Cookies, and Coca-Cola.

Security experts note that Everest has shifted tactics from encrypting systems to stealing and leaking data as a pressure mechanism. This approach creates significant reputational and legal pressure on victims to pay ransoms.

TROYPOINT Tip: Never worry about identity theft by using Aura which is TROYPOINT’s recommended identity theft protection!

Aura Identity Theft Protection Review

Final Thoughts

The Pacific HealthWorks data breach represents another alarming example of healthcare organizations under siege from ransomware groups.

With medical records containing some of the most sensitive personal information, patients should monitor their accounts closely for signs of identity theft or fraud.

Healthcare providers must prioritize cybersecurity investments to protect patient data from these increasingly sophisticated attacks.

For more details on this story, refer to the Pacific HealthWorks website for updates and the report from Cybernews.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.