The data breach notification says the ransomware attack occurred on December 1, 2022, with Regal's employees noticing technical difficulties the following day.
After engaging a third-party cybersecurity expert to help investigate, it was determined that malware had infected the organization's servers, so a system restoration process was initiated.
Based on the review of the logs, the investigation determined that the following data had been compromised:
- Full name
- Social Security Number (SSN)
- Date of birth
- Address
- Medical diagnosis and treatment
- Laboratory test results
- Prescription data
- Radiology reports
- Health plan member number
- Phone number
Ransomware actors steal this data to create further leverage when extorting healthcare organizations, taking advantage of the highly sensitive nature of medical data.
Regal's notice encloses instructions on enrolling for one year of free credit monitoring via Norton LifeLock.
"Regal understands the importance of safeguarding your personal information and takes that responsibility very seriously," reads the
notice.
