In a recent revelation, Capital Health, a hospital with locations in Trenton, Pennington, and Hamilton in Mercer County, disclosed that vital patient information, including names, social security numbers, dates of birth, and clinical details, may have been exposed during a cyberattack that occurred in November last year.
The hospital is actively working to assess the extent of the data breach and identify those affected. The cybersecurity incident resulted in network outages on Nov. 28, 2023, prompting a comprehensive investigation into the matter.
According to the findings, an unauthorized party gained access to Capital Health’s systems between Nov. 11 and Nov. 26, 2023. A subsequent forensic investigation confirmed that certain files on the hospital’s network were acquired and/or accessed by the third party on Dec. 1, 2023.
Capital Health emphasized that, as of now, there is no evidence indicating the misuse of personal information or protected health information. The hospital stressed that the data breach aligns with similar incidents affecting various industries.
To ascertain the nature and scope of the cyberattack and ensure the security of the hospital’s computer systems and network, an extensive investigation has been launched, involving collaboration with a leading external forensic security firm. Law enforcement has also been notified of the incident.
The hospital acknowledges the potential exposure of information such as names, addresses, social security numbers, dates of birth, email addresses, telephone numbers, and possibly clinical details. As a precautionary measure and in compliance with relevant regulations, Capital Health is notifying affected individuals to help them minimize the risk of information misuse.
Potentially affected individuals are encouraged to contact IDX with any inquiries and to enroll in identity protection services, offered at no cost. IDX representatives are available Monday through Friday from 9 a.m. to 9 p.m., and the deadline for enrollment is April 30. The hospital has provided a brief description of steps individuals can take to safeguard their identity, credit, and personal information in the wake of this incident.
