SSRH among hospitals hacked by cybercriminals

Community Health Systems -- owner of Siloam Springs Regional Hospital -- is offering free identity theft protection to the more than 4 million patients affected by a foreign cyber attack on the company.

Community Health Systems owns or leases more than 206 hospitals in 29 states including Siloam Springs Regional Hospital, Northwest Arkansas Medical Center in Bentonville and Springdale, and Willow Creek Women's Hospital in Johnson.

No medical or credit card information was taken in the cyber attack but names, addresses, birth dates, telephone numbers and Social Security numbers were taken, according to a statement released by Cathy Davis, spokeswoman for the Siloam Springs Regional Hospital.

"We take very seriously the security and confidentiality of private patient information and we sincerely regret any concern or inconvenience to patients," Davis said. "Though we have no reason to believe that this data would ever be used, all affected patients are being notified by letter and offered free identity theft protection."

Community Health Systems has set up a toll free number patients may call to speak with a person if they have any questions related to the security breach. The number is 855-205-6951.

The information that was taken belonged to some patients who were seen at physicians' practices and clinics affiliated with Community Health Systems over the past five years. The company believes the attack took place in April and June, according to a report from the Securities and Exchange Commission.

The company believes the intruder was a group in China that was likely looking for intellectual property, Davis said. The intruder used highly sophisticated methods to bypass the company's security systems.

The company has been working with federal law enforcement authorities in their investigation and supports prosecution of those responsible for the attack, Davis said.

"Many American companies and organizations have been victimized by foreign-based cyber intrusions. It is up to the federal government to create a national cyber defense that can prevent this type of criminal invasion from happening in the future," Davis said.