Ransomware
Anna Jaques Hospital Money Message Ransomware
Primary Source βIncident Details
Anna Jaques Hospital in Newburyport, Massachusetts was attacked on Christmas Day 2023 by the Money Message ransomware group, which claimed 600 GB of data was stolen. 316,342 patients’ comprehensive PHI was exposed including demographics, medical information, health insurance details, SSNs, driver’s license numbers, financial information, and prescription data. When the ransom deadline passed in late January 2024, the data was published on the dark web. Patient notification was not completed until December 2024 due to the lengthy manual document review of the forensic investigation.
Technical Details
- Initial Attack Vector
- Money Message ransomware gained access to Anna Jaques Hospital network; initial access vector not publicly disclosed
- Malware Family
- Money Message
Timeline
- 2023-12-25 Breach occurred
- 2024-01-19 Publicly disclosed
- 2024-12-01 Customers notified