Company with 6 hospitals in Alabama says patient info may have been disclosed in cybersecurity ‘incident’

A healthcare company that runs six hospitals in Alabama announced Thursday that patient and other information may have been disclosed during a cybersecurity “incident” in January. ...Crestwood Medical Center in Huntsville, said the cybersecurity firm it contracts with to provide secure file transfer software became aware of the incident on the night of Jan. 30. The actual incident occurred sometime between Jan. 28 and Jan. 30, CHS said. Fortra, the cybersecurity firm, took down impacted systems offline on Jan. 31. ...CHS said it would provide identity restoration and credit monitoring services for free for two years among those that request it. Those wishing to enroll in those services or those with questions on the incident were asked to call 1-800-906-7947. That number is available Monday through Friday from 8 a.m. to 10 p.m. and on Saturday and Sunday from 10 a.m. to 7 p.m. The deadline to enroll in the services is June 30. ...

Reference: www.al.com