UCLA Health victim of a criminal cyber attack

UCLA Health has announced that it was a victim of a criminal cyber attack.

While the attackers accessed parts of the computer network that contain personal and medical information, UCLA Health has no evidence at this time that the cyber attacker actually accessed or acquired any individual’s personal or medical information.

UCLA Health estimates that data on as many as 4.5 million individuals potentially may have been involved in the attack, believed to be the work of criminal hackers. UCLA Health is working with investigators from the FBI, and has hired private computer forensic experts to further secure information on network servers.

UCLA Health in the process of notifying those whose information was stored on the affected parts of the network

“We take this attack on our systems extremely seriously,” said Dr James Atkinson, the interim associate vice chancellor and president of the UCLA Hospital System. “Our patients come first at UCLA Health and confidentiality is a critical part of our commitment to care. We sincerely regret any impact this incident may have on those we serve. We have taken significant steps to further protect data and strengthen our network against another cyber attack.”

At this time, there is no evidence that the attacker actually accessed or acquired individuals’ personal or medical information. However, as UCLA Health cannot conclusively rule out the possibility that the attackers may have accessed this information, individuals whose information was stored on the affected parts of the network are in the process of being notified.

UCLA Health is sending letters to affected individuals with details on how to access the identity theft and restoration services, which individuals will receive over the next few weeks, and has established a website for patients that may have been impacted.