The largest medical facility in Lake Charles (LCMHS), Louisiana was attacked by ransomware, resulting in a leak of information about almost 270 thousand patients.

Lake Charles Memorial Health System is the largest non-profit public health system in southwest Louisiana.

LCMHS reported the incident to the Secretary of the U.S. Department of Health and Human Services (HHS).

The security breach occurred back on October 21, 2022, when the internal security group discovered unusual activity on its computer network.

The organization immediately launched an investigation into the incident, as a result of which it was discovered that the attackers stole files containing confidential data, such as: full personal data, physical addresses, medical records, health insurance information, payment information and other equally sensitive information, and electronic medical records allegedly were not affected.

According to the portal of hacking health organizations, the incident affected 269,752 people.

Starting from December 23, 2022, the company sends a notification about the data leak by mail to affected patients.

The company offers credit monitoring and identity theft protection services to individuals whose social security number could have been compromised.

There are not many technical details about the attack, but for the knowledgeable, everything is more or less clear, since the Hive ransomware group added LCMHS to the list of victims on its Tor leaks site on November 15, 2022, stating that the attack occurred on October 25, 2022.

The gang also published files allegedly stolen from LCMHS systems, including contracts, records of materials, medical information, medical records, scans and more.