In October 2022, Lake Charles Memorial Health experienced a data breach where an unauthorized third party gained access to sensitive patient information. The compromised data included names, addresses, identification numbers, health insurance details, payment information, dates of birth, clinical records, and Social Security numbers. The breach led to a $2 million class-action lawsuit settlement, with eligible plaintiffs receiving up to $5,000 for out-of-pocket expenses and reimbursement for lost time. The hospital denied wrongdoing but agreed to the settlement, which requires class members to submit valid claims by September 5, 2025. The incident highlights the growing threat of data breaches in healthcare, where inadequate security measures can expose highly sensitive personal and medical data, resulting in financial and reputational damage, legal consequences, and loss of patient trust. The breach underscores the critical need for robust cybersecurity protocols to protect against unauthorized access and mitigate risks associated with digital storage of patient information.

Hive hacked the Lake Charles Memorial Health System (LCMH)’s network for 12 days. It had exfiltrated 270 GB of files including patient and employee data. A sample of files was attached to the email as proof of claims. Hive demanded $900,000 to delete all files and provide them with information on their vulnerabilities. The leak included protected health information on patients, such as a folder with 5,834 files for patients using the mammography service in 2022. Other folders contained internal documents, such as files relating to a previous HIPAA breach inquiry, and yet other folders and files contain personnel information on employees. It also contained files on personnel information and a folder with 664 files on individual employees with their personal and personnel information.