Series of cyberattacks hit rehabilitation hospitals

Cybercriminals have attacked rehabilitation hospitals in South Carolina and extracted employee data.

On April 2nd, three rehabilitation hospitals reported cyberattacks to the South Carolina Department of Consumer Affairs. In total, 12,515 individuals are reported to be affected by data breaches.

Among the affected institutions are Spartanburg Rehabilitation Institute based in Spartanburg County, Midlands Regional Rehabilitation Hospital in Kershaw County and Greenwood Regional Rehabilitation Hospital in Greenwood County.

In the notice to affected individuals, hospitals state that on February 1st, they noticed unusual activity on their IT systems. An investigation showed that unauthorized actors had gained access to internal networks between January 16th and February 4th, 2024.

The files accessed by threat actors contained the personal data of current and former employees at the hospitals. Exactly what data was breached is not disclosed in the publicly shared notice. The hospitals are offering affected individuals 12 months of identity theft protection services free of charge.