Texas Tech University Health Sciences Center breach hit 1.46 million patients

Texas Tech University Health Sciences Center and Texas Tech University Health Sciences Center El Paso confirmed in late November 2024 that a September cyberattack had exposed patient information. Computer systems and applications at both institutions were disrupted, and the investigation found that an unauthorized party accessed or removed files and folders between September 17 and September 29, 2024.

The exposed information varied by person and could include names, addresses, dates of birth, Social Security numbers, driver's license and other government identification numbers, financial account details, health insurance information, and medical records covering diagnoses, treatment, medical record numbers and billing or claims data.

The Interlock ransomware group claimed the attack in late October 2024 and began publishing files on its leak site. It said it held roughly 2.5 terabytes of material, including patient records, medical research and several SQL databases. The health sciences centers did not confirm that attribution. SecurityWeek noted that a separate group, Meow, had claimed the university earlier in July 2024.

Breach reports filed with the U.S. Department of Health and Human Services put the combined total at about 1.46 million people, 650,000 at the main Health Sciences Center and 815,000 at the El Paso center. The centers began notifying individuals, set up a toll free assistance line, offered complimentary credit monitoring, and said they were reviewing data security policies and adding intrusion monitoring.