'While in our IT network, the unauthorized party accessed and acquired files that contain patient information,' HealthAlliance said in a statement.
Now, officials say the probe involving the New York State Department of Health, local authorities in the Hudson Valley, the FBI and a third-party cybersecurity firm determined that hackers were able to access the parent company's information technology network from Aug. HealthAlliance, Inc., the corporate parent of the three facilities, said Monday that it 'began mailing notification letters to patients whose information may have been involved in a data security incident.' The security issue was acknowledged publicly in October by the broader Westchester health network, but few details were released about the nature or the extent of the breach as an investigation got underway. The attack targeted three separate facilities in the Hudson Valley - HealthAlliance Hospital, Margaretville Hospital and Mountainside Residential Care Center - which all operate under the same parent company and within the hospital conglomerate Westchester Medical Center Health Network. A group of New York hospitals and health care centers were targeted in a cyberattack that for two months allowed hackers to access patients' private information, officials said this week.