Tampa General Hospital Hit By Hackers

Discovers Data Breach Impacting 1.2 Million Patients

Tampa General Hospital recently revealed that it fell victim to a cyberattack, resulting in the compromise of sensitive personal data of approximately 1.2 million patients. The breach, attributed to an "unauthorized third party," was detected on May 31 after the hospital noticed unusual activity in its computer systems. According to a statement released on its website, the infiltration occurred between May 12 and May 30, executed by a criminal group.
Immediate actions were taken by the hospital to contain the breach, launching an investigation with the support of a third-party forensic firm, preventing any severe disruptions to patient care services.
The stolen patient data varies from individual to individual and may include names, addresses, phone numbers, date of birth, Social Security numbers, health insurance information, medical record numbers, account numbers, dates of service, and limited treatment information used for business operations.
Tampa General Hospital has undertaken the responsibility of notifying potentially affected patients via mail, ensuring they receive prompt information about the incident. Additionally, the hospital is providing complimentary credit monitoring and identity theft protection to patients whose Social Security numbers were compromised.

Click here for more information from the Tampa General Hospital Website

If you are currently a patient, it is advised you carefully review statements from your health insurers and healthcare providers, promptly reporting any unauthorized services.
The hospital assures the public that its electronic medical record system was not involved or accessed during the cyberattack.
In light of recent events and as part of our ongoing commitment to safeguarding everyone's data through Awareness, we want to take a moment to remind all TallMark friends and collegues about the importance of staying vigilant against phishing attempts. Phishing attacks continue to be one of the most significant cybersecurity threats in the world today, and it is crucial that we all remain well-informed to protect ourselves and our families

Identifying Phishing Emails:

Phishing emails are designed to deceive and manipulate recipients into revealing sensitive information, such as login credentials or personal data, by clicking on malicious links or downloading harmful attachments. Here are some common signs to help identify phishing emails:

• Sender Address: Pay close attention to the sender's email address. Check for misspellings, unusual domain names, or variations that seem out of the ordinary.
• Urgency and Fear Tactics: Be cautious of emails that create a sense of urgency, fear, or pressure you into taking immediate action, such as threatening to close your account or warning of dire consequences if you don't click on a link.
• Generic Greetings: Phishing emails often use generic greetings like "Dear Customer" instead of addressing you by your name.
• Suspicious Links: Hover your mouse over any links in the email (without clicking) to see the actual URL. If the link's destination seems unrelated to the email's content or looks suspicious, do not click on it.
• Attachments: Exercise caution when opening attachments, especially if they are unexpected or come from unknown sources.

Best Practices:

To reinforce our defense against phishing attacks, keep the following best practices in mind:

• Think Before You Click: Always pause and carefully examine emails, especially those requesting sensitive information or urging immediate action.
• Verify the Source: If you receive an email requesting sensitive information or asking you to click on a link, verify the request through a different communication channel or by contacting the sender directly using established contact information.
• Report Suspected Phishing: If you suspect an email is a phishing attempt, report it immediately to our IT or security team, who will investigate and take appropriate action.

Risks of Clicking Phishing Links:

Clicking on phishing links can have severe consequences as an individual. These risks include:

• Data Breach: Clicking on a malicious link could compromise your login credentials or other sensitive information, potentially leading to unauthorized access to your banking or other important accounts and services you use.
• Malware Infection: Phishing links may lead to the installation of malware on your device, allowing cybercriminals to monitor activities, steal information, or cause disruption to your network and home.
• Financial Loss: Falling victim to a phishing scam might result in financial loss.

• Be suspicious of links in emails or messages, especially if they contain the .zip domain for anything.
• Hover over links to see the actual URL. Cybercriminals may use fake URLs that look similar to legitimate URLs.
• Do not click on links in emails or messages from unknown senders.
• If you are unsure whether a link is legitimate, go directly to the website by typing the URL into your web browser

In addition to the above tips, you can also protect yourself from phishing scams by:

• Enabling two-factor authentication (2FA) on your accounts.
• Keeping your software up to date.
• Being careful what information you share online.