Hack, Extortion of Patient Records Fuels Hospital System Lawsuit

During the holiday season, hackers contacted medical patients in Oklahoma and threatened to sell their highly sensitive information on the dark web, according to a proposed class action filed in Oklahoma federal court.

The “disturbing emails” targeting people enrolled with Integris Health Inc.—which operates 15 hospitals in the state—claimed to have stolen more than 2 million patient records and instructed victims to pay $50 by Jan. 5 to prevent their data from being sold for use in fraud and identity theft by cybercriminals, according to the lawsuit filed Monday in the US District Court for the Western District of Oklahoma. ...