Skip to main content

Columbus Regional Healthcare Data Breach Investigation

Over 132,000 individuals linked to Columbus Regional Healthcare System (CRHS) may have had their personal information compromised in a ransomware attack that occurred in May 2023.  Data breach notification letters have been sent to those impacted, detailing the specific personal data that may be at risk. Contact our legal team to discuss filing a class action data breach lawsuit. We represent plaintiffs nationwide, and are currently involved in a wide range of data privacy litigation. 

What Happened at Columbus Regional Healthcare System?

In June 2023 Columbus Regional discovered that it was the target of a ransomware attack, and a large amount of sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired.

The Daixin ransomware gang claimed the ransomware attack against CRHS. According to reports, the ransomware group encrypted the Columbus Regional network on May 18, 2023, after exfiltrating data and deleting backups stored on the system. They later said the North Carolina-based CRHS failed to meet their demands, which they said amounted to $2 million. The group said they planned to leak stolen, confidential patient data.

Columbus Regional Healthcare System is a hospital and healthcare center providing medical care to Whiteville and Leland, North Carolina. They specialize in cancer care, cardiac care, emergency and critical care, birthing, preventative screening and care, and pediatric care.

On January 19, 2024, Columbus Regional began notifying individuals whose information may have been impacted. The type of leaked information could include the following:

  • Name
  • Social Security number
  • Date of birth
  • Driver’s license number
  • Passport number/ alien registration number
  • Financial account information
  • Medical information
  • Health insurance information

Contact our data breach lawyers to learn more about how to protect yourself after your sensitive personal information is leaked to cybercriminals. Taking legal action can help recover damages, and can hold any negligent party accountable. Call for a free consultation.