Community Health Systems (CHS) says it was impacted by a recent wave of attacks targeting a zero-day vulnerability in Fortra’s GoAnywhere MFT secure file transfer platform.
The healthcare provider giant said on Monday that Fortra issued an alert saying that it had “experienced a security incident” leading to some CHS data being compromised.
A subsequent investigation revealed that the resulting data breach affected the personal and health information of up to 1 million patients.
“While that investigation is still ongoing, the Company believes that the Fortra breach has not had any impact on any of the Company’s information systems and that there has not been any material interruption of the Company’s business operations, including the delivery of patient care,” CHS said an 8-K filing with the SEC first spotted by DataBreaches.net.
The Clop ransomware gang claims to be behind these attacks and told BleepingComputer that they’ve breached and stolen data from over 130 organizations.