Ransomware

Anna Jaques Hospital Money Message Ransomware

πŸ“… 2023-12-25 🦠 Money Message
Primary Source β†—

Incident Details

Anna Jaques Hospital in Newburyport, Massachusetts was attacked on Christmas Day 2023 by the Money Message ransomware group, which claimed 600 GB of data was stolen. 316,342 patients’ comprehensive PHI was exposed including demographics, medical information, health insurance details, SSNs, driver’s license numbers, financial information, and prescription data. When the ransom deadline passed in late January 2024, the data was published on the dark web. Patient notification was not completed until December 2024 due to the lengthy manual document review of the forensic investigation.

Technical Details

Initial Attack Vector
Money Message ransomware gained access to Anna Jaques Hospital network; initial access vector not publicly disclosed
Malware Family
Money Message

Timeline

  1. 2023-12-25 Breach occurred
  2. 2024-01-19 Publicly disclosed
  3. 2024-12-01 Customers notified