The Roanoke Times has an update in the story where a hacker (or group of hackers) attempted to ransom to Virginia officials millions of patient and prescription records that had been in a Virginia database. The security of a state Web site used to track the data was breached.
Virginia officials have yet to determine how severely a hacker compromised the state’s prescription monitoring database, but say they are taking steps to restore other online services for health professionals.
The FBI and the Virginia State Police continue to investigate a security breach involving the prescription monitoring program maintained by the Department of Health Professions, which licenses health care providers in the state. State officials said a hacker penetrated the program’s Web site, accessed millions of prescription records and reportedly posted a note demanding $10 million for the data’s return. The department recognized the unauthorized message on April 30 and shut down its computer systems to protect its data.
The criminal probe could take “a couple more weeks,” state Secretary of Health and Human Resources Marilyn Tavenner said today, when she appeared before the House Appropriations Committee. […]
[L]awmakers were told that the Department of Health Professions ranked in the top 5 percent of state agencies in an audit of information security. All of the department’s data had been properly backed up and that back-up files had been properly secured, officials said.