Advanced China-Based Hackers Steal Personal Data in Unprecedented Attack

A Group of Advanced Hackers in China that Generally Targets Intellectual Property, Stole Personal Data from Community Health Systems in an apparently Unprecedented Breach. The Health-Care Provider Said in a Regulatory Filing, it Believes Hackers Based in China Absconded with 4.5 Million Pieces of “non-medical patient identification data related to [its] physician practice”. The Attacks Occurred in April and June. The Dataset was Made Up of Patient Names, Addresses, Birthdates, Telephone and Social Security Numbers from Individuals Who Used or were Referred to the Physicians' Service over the Past 5 Years. It Didn’t Include Medical or Clinical Information, or Credit Card Numbers. Still, the Information is Considered Protected under Health Insurance Portability and Accountability Act, Better Known as HIPAA. Mandiant Managing Director, Charles Carmakal, Told FOX Business, the Attack was the “first confirmed compromise where [advanced hackers in China] stole data like this”. While he Couldn’t Name the Specific Group Accused of Breaking into Community Health’s Systems, he Said the Hackers are “known for stealing intellectual property related to health-care technology or other information that can help the Chinese government help residents of the country”.


Carmakal Said Community Health Hired Mandiant in June of this Year, at which Point the FireEye (FEYE) Unit “conducted a thorough investigation of their network to understand the compromise”.  Mandiant Determined the Perpetrators Used Highly Sophisticated Malware and Technology to Break through Community Health’s Computer Defense Systems. Carmakal Added the Group is Known for “very creative attacks and techniques to break network defense”. The Attack is a Departure from Many Recent Breaches in which Hackers, Many of whom Reside in Eastern Europe, Snag Personal Information and Sell it on the Cyber Black Market. "If intellectual property were the target, it’s possible (but not reported) that much like Target was breached via an HVAC contractor, perhaps there was more access to be had through medical networks to additional data and / or [intellectual property]", Said Mark Stanislav, Security Evangelist at Duo Security, a Provider of 2-Step Authentication Systems. "We may just be hearing the beginning of this story as further forensics and analysis occurs." Community Health Said, it has “Eradicated” the Malware from its Computer Systems and Implemented “other remediation efforts that are designed to protect against future intrusions of this type”. It Said it has Cyber Liability and Privacy Insurance and Doesn’t Think the Hack will Have a “material adverse effect on its business or financial results”.


Affected Customers will be Offered Free Identity Theft Services. The Shares Jumped More than 1% in Afternoon Trading Monday, Extending Year-to-Date Gains of 30%. Kevin Mandia, Who Founded Mandiant and is Now COO at FireEye, Told FOX Business Earlier this Month that, the Health-Care Sector is One of the Most Vulnerable to Attacks. He Said the Reason is because People Generally Demand Medical Records be Accessible Quickly so, Barriers are Sometimes Set to Low Levels to Facilitate the Process of Moving them. The Federal Bureau of Investigation Issued a Similar Warning to Health-Care Providers in April, according to a Report from Reuters. A Private Notice Obtained by the Newswire Said, “the health-care industry is not as resilient to cyber intrusions compared to the financial and retail sectors, therefore the possibility of increased cyber intrusions is likely”.