Soniva Dental Care, a 14-location DSO based in San Antonio, recently disclosed a cybersecurity incident affecting up to 30,000 patients across several of its offices, the HIPAA Journal reported July 29.
Soniva said it was informed by its IT support company May 26 about suspicious remote access sessions targeting its remote desktop web services infrastructure. The company said it rapidly contained the incident by terminating external communications, disabling accounts with remote access and locking down its infrastructure.
Files potentially exposed in the breach included names, addresses, dates of birth, driver’s license numbers, government-issued IDs and medical information.
Ransomware group TheGentlemen reportedly claimed responsibility for the attack, posting samples of allegedly stolen data on the dark web in June, Class Action U reported.
