Kootenai Health Details

Kootenai Health

Coeur d’Alene, Idaho • employees •

United States

Industry

Security Incidents

Kootenai Health is a leading healthcare provider headquartered in Coeur d'Alene, Idaho. It offers a wide array of medical services to patients in northern Idaho and throughout the Inland Northwest. The organization's main campus includes a 330-bed community-owned hospital, ensuring a robust capacity to meet the healthcare needs of the region.

Founded with a commitment to delivering high-quality patient care, Kootenai Health has achieved notable milestones in the healthcare industry. It is accredited by DNV and holds the prestigious Magnet Designation for nursing excellence. The hospital was a...
Show more

Security Incidents

Kootenai Health Breach of Feb 2024

Severity Score

Significant

Type

Ransomware Attack

Summary

Kootenai Health disclosed a data breach affecting over 464,000 patients after the 3AM ransomware operation compromised and leaked personal information. The breach was initiated on February 22, 2024, granting cybercriminals ten days of unfettered access to Kootenai's systems before being detected on March 2, 2024. The investigation concluded on August 1, identifying that the stolen data included full names, dates of birth, Social Security numbers, driver’s licenses, government ID numbers, medical records, treatment and condition information, medical diagnoses, and health insurance information. ...
Show more

Severity

The data breach at Kootenai Health, involving a ransomware attack by the 3AM group, resulted in the exposure of personal information for over 464,000 patients. Sensitive data, such as full names, Social Security numbers, medical records, and health insurance information, was compromised and later leaked on the darknet, creating significant risks for identity theft and fraud. While the breach did not disrupt services, the severe exposure of sensitive data and the potential for misuse place this incident in the "Significant to High" category of severity.

Impact

Kootenai Health experienced a significant data breach as a result of a ransomware attack orchestrated by the 3AM group, compromising personal information of over 464,000 patients. The attack exposed sensitive data, including full names, dates of birth, Social Security numbers, driver’s licenses, government ID numbers, medical records, and health insurance information.

Although customer data was not immediately misused, the breach resulted in substantial risks as a 22GB data archive was leaked on the darknet. This breach did not specifically disrupt systems or services, but the exposed sensit...
Show more