The State of Montana's Department of Public Health and Human Services was hacked and cybercriminals compromised up to 1.3 million records. State officials confirmed the problem and said the department has informed customers, warning Social Security numbers and other personal information might be at risk.
In addition to customer Social Security numbers, hackers breached patient names, birth dates, bank account numbers, medical diagnosis, prescriptions, dates of service, and treatments given.
"We have absolutely no indication the criminals who illegally entered the server had any interest in the data they accessed in any way, shape or form, and we have no reports of people's identities being stolen," said Richard Opper, department director, in a statement.
Patient medical records are a popular target for cybercriminals, earning hackers a higher price tag when released on the black market. Healthcare IT is evolving, but security loopholes are typically not found until a major compromise takes place, security experts warn.