Atrium Health Data Breach Affected More than 2 Million Patients

Atrium Health hit with a major data breach which impacted 2.65 million patients, attackers accessed the patient’s personal information. The intrusion occurred between Sept. 22-29.

Hackers gained access to the data stored in a third-party system owned by AccuDoc Solutions Inc., which provides billing services to Atrium and other 50 medical centers.

The personal information including names, addresses, dates of birth, invoice numbers, account balances, dates of service, insurance policy information and Social Security numbers are compromised, Atrium says in a report to Bizjournals.

Atrium confirms no medical records nor financial information was impacted with the data breach as they stored in their core system and not associated with AccuDoc.

The breach was reported by AccuDoc to Atrium on Oct. 1, according to the forensic investigations, the hackers only able to obtain the read-only permission for the data and they were not able to remove or download data.

Affected locations include Atrium Health facilities and partner sites at Blue Ridge Healthcare System, Columbus Regional Health Network, New Regional Medical Center Physician Group, Scotland Physicians Network, and St. Luke’s Physician Network.

“Atrium notifying the patients about the breach and guarantors who may have been impacted by this incident. We take cybersecurity very seriously, and we’ve worked very hard to determine exactly what happened and how to prevent,” reads Atrium statement.

Related Read

These are the Top 5 Publicly Available Hacking Tools Mostly used By Hackers

Hackers Breach HealthCare.gov System and Steal Sensitive Personal Data of 75,000 Customers

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

New Pass-the-Cookie Attacks Bypass MFA, Giving Hackers Full Account Access

Multi-factor authentication (MFA), long considered a cornerstone of cybersecurity defense, is facing a formidable new…

2 hours ago

Chinese Hackers Exploit Check Point VPN Zero-Day to Target Organizations Globally

A sophisticated cyberespionage campaign linked to Chinese state-sponsored actors has exploited a previously patched Check…

4 hours ago

PingAM Java Agent Vulnerability Allows Attackers to Bypass Security

A critical security flaw (CVE-2025-20059) has been identified in supported versions of Ping Identity’s PingAM…

4 hours ago

New GitHub Scam Uses Fake “Mods” and “Cracks” to Steal User Data

A sophisticated malware campaign leveraging GitHub repositories disguised as game modifications and cracked software has…

5 hours ago

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data

Netskope Threat Labs uncovered a sprawling phishing operation involving 260 domains hosting approximately 5,000 malicious…

7 hours ago

Winos4.0 Malware Targets Windows Users Through Malicious PDF Files

A new wave of cyberattacks leveraging the Winos4.0 malware framework has targeted organizations in Taiwan…

7 hours ago