On January 22, 2024, AHS Management Company, Inc., more commonly known as Ardent Health Services (“Ardent”), filed a notice of data breach on behalf of BSA Hospital following a ransomware attack against Ardent. In this notice, Ardent explains that the incident resulted in an unauthorized party being able to access patients’ personal information. Upon completing its investigation, Ardent began sending out data breach notification letters to all BSA Hospital patients whose information was affected by the recent data security incident.
If you received a data breach notification from Ardent Health Services or AHS Management Company, Inc., it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Ardent Health Services data breach. For more information, please see our recent piece on the topic here.
Was There a Data Breach Affecting BSA Hospital Patients?
The Ardent Health Services / BSA Hospital data breach was only recently announced, and more information is expected in the near future. However, Ardent’s filing with the Attorney General of Massachusetts provides some important information on what led up to the breach. BSA Hospital also posted notice of the incident on its website, which takes users to the Ardent Health Services website.
According to these sources, on November 23, 2023, Ardent learned that it was recently the victim of a ransomware attack. In response, Ardent notified law enforcement, took steps to secure its network, and then launched an investigation with the help of outside data security experts. Shortly after discovering the attack, Ardent was able to terminate all unauthorized access. However, Ardent’s investigation ultimately confirmed that an unauthorized party was able to access and copy documents containing confidential patient information.
After learning that sensitive BSA Hospital patient data was accessible to an unauthorized party, Ardent Health Services reviewed the compromised files to determine what information was leaked and which consumers were impacted. The Ardent filing with Massachusetts Attorney General does not list the specific data types that were subject to unauthorized access. However, the data breach notice on Ardent’s website indicates that, while the breached information varies depending on the patient, it may include your name, address, phone number, email address, Social Security number, medical treatment information, health insurance and claims information, and Medicaid or Medicare number.
On January 22, 2024, Ardent Health Services sent out data breach letters to all BSA Hospital patients affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About BSA Hospital
BSA Hospital is a healthcare services provider based out of Amarillo, Texas. BSA Hospital is a part of the BSA Health System, which is affiliated with Ardent Health Services. BSA Health System operates approximately 20 hospitals, clinics, urgent care facilities, and other healthcare facilities in Amarillo and throughout the Texas panhandle. The BSA Health System employs approximately 3,000 people and generates over $135 million in revenue each year.
