Skip to main content

Norton Healthcare Data Breach Investigation

The Lyon Firm is currently investigating the ransomware attack against Norton Healthcare. Recent reports suggest up to 2.5 million individuals may have had their data compromised in the May 2023 data security incident. Contact our data breach lawyers if Norton notifies you of a data breach. You may be eligible to file a class action claim and hold any negligent party accountable for your losses.

What happened at Norton Healthcare?

The Louisville, Kentucky-based health system, Norton Healthcare, has confirmed that the ransomware attack that occurred in May 2023 in fact exposed personal information belonging to patients, employees, and dependents.

On May 9, 2023, Norton Healthcare discovered a data breach in which sensitive information had possibly been accessed. By May 25, a ransomware group took responsibility for the breach and claimed to have obtained millions of Social Security numbers. On May 24, 2023, Norton disclosed on its website that a cyberattack indeed impacted its systems.

Norton Healthcare posted a notice of data breach on its website, explaining that confidential patient data may have been subject to “unauthorized access.”

The attack was claimed by the ALPHV (BlackCat) gang, a group known for targeting healthcare entities. The attackers claimed that they allegedly stole 4.7 TB of data from the healthcare system’s compromised systems. With almost daily IT network attacks, the U.S. government has issued advisories regarding ransomware attacks targeting healthcare institutions nationwide.

What Personal Data Was Compromised?

The information impacted varies from person-to-person, but may have included the following: name, contact information, Social Security Number, date of birth, health information, insurance information, medical identification numbers, driver’s license numbers or other government ID numbers, financial account numbers, and digital signatures.

Cyber security experts say even a small bit of leaked data can lead to medical identity theft and fraudulent activity. Anyone who has had their data stolen should begin to take certain measures to mitigate the risk of identity theft.

More about Norton Healthcare

Norton is a large healthcare and hospital system based in Louisville, Kentucky, serving adult and pediatric patients in clinics and hospitals in Louisville, Southern Indiana, and the Commonwealth of Kentucky.

Contact our legal team to learn more about what you should do following a data breach incident. Our lawyers are currently involved in numerous data privacy cases in all fifty states, and offer free consultations to data theft victims.