The Texas Tech University Health Sciences Center (TTUHSC) and its El Paso campus have disclosed a significant data breach stemming from a September 2024 cyberattack. The breach compromised sensitive information belonging to over 1.4 million individuals, including Social Security numbers, medical records, financial data, and government-issued ID details.
TTUHSC has launched a detailed investigation, notified affected individuals, and implemented additional security measures.
The attack, attributed to the Interlock ransomware group, exposed 2.6 terabytes of data and led to temporary system disruptions. To support those impacted, TTUHSC is offering complimentary credit monitoring services and providing guidance to help individuals protect against potential identity theft and fraud.
Why It Matters: The TTUHSC breach highlights the increasing vulnerabilities within healthcare systems, where sensitive patient data is highly sought after by cybercriminals. Data breaches in the healthcare sector expose sensitive personal and medical information, potentially leading to identity theft, financial fraud, and privacy violations. This incident underscores the urgent need for enhanced cybersecurity protocols and industry-wide reforms to safeguard patient data.
- Scope of the Breach: Hackers accessed and exfiltrated data from TTUHSC systems between September 17 and September 29, 2024. Information stolen includes names, addresses, Social Security numbers, medical records, financial account details, and health insurance data.
- Support for Victims: TTUHSC is notifying affected individuals directly and providing complimentary credit monitoring services. Victims are urged to remain vigilant, monitor their accounts for suspicious activity, and consider placing fraud alerts or credit freezes on their credit files.
- Investigation and Preventative Measures: In response to the breach, TTUHSC conducted a detailed review of affected systems, enhanced network protections, and updated its cybersecurity policies. These measures aim to prevent future incidents.
- Guidance for Individuals: TTUHSC encourages affected individuals to obtain free annual credit reports, place fraud alerts, or implement credit freezes to protect their identities. Detailed instructions and assistance are available via a dedicated toll-free hotline.
