#fdhs — Public Fediverse posts

Uh. Um.

In the first para of a substitute notice by Florida Digestive Health Services, it says, in boldface: "There is no evidence that any patient health information was actually accessed or downloaded. "

Then, the What Happened section reads:

"On March 28, 2024, FDHS learned that PHI may have been extracted from its systems. As soon as FDHS learned of the incident, it began an internal investigation to identify what occurred and what patient data may be at risk. FDHS also began working with independent cybersecurity specialists to help determine what had occurred, and whether any information was at risk. On April 30, 2024, in conjunction with law enforcement, FDHS was able to determine the scope of the information affected. Then, on June 14, 2024, the investigation concluded, and FDHS learned that some patient data may have been impacted. While we are not aware of any misuse of information we wanted to notify our patients of this incident."

So.... was it or wasn't it? Did some threat actors really cover their tracks that well? No group has claimed responsibility for any attack on #FDHS as far as I can tell.

#databreach #maybe #whoknows #HIPAA #healthsec