Centura hospitals in Colorado hit by ransomware attack that exposed patient information

The Centura Health hospitals in Colorado were among the victims of a large cyberattack that exposed some patients’ information.

The ransomware attack happened at some point between Sept. 16 and Oct. 3, according to CommonSpirit Health, which owns the Catholic hospitals in the Centura partnership. The Adventist hospitals are owned by AdventHealth. While the two announced in February that they intend to split, they currently share much of their administration through Centura.

CommonSpirit reported it took until Feb. 21 to confirm exactly what information the hackers had accessed, and that it started sending letters Thursday to patients whose information was exposed.

The compromised information includes names; dates of birth; diagnoses and treatments patients received; dates when patients received services and the providers who performed them; health insurance information; and contact information.

A small percentage of patients’ Social Security numbers may have been stolen, according to CommonSpirit.

CommonSpirit said it hasn’t found any evidence that patients’ information was misused within the organization, but urged victims to read their bills carefully, just in case.

People whose data was exposed can call 866-869-0312 if they have questions.

Sign up for our weekly newsletter to get health news sent straight to your inbox.