Chattanooga Heart Institute Caught in Cyberattack

An unauthorized third party gained access to the provider’s network.

By HFT Staff


On April 17, 2023, The Chattanooga Heart Institute identified indications of a cybersecurity 
attack on its IT network. The Chattanooga Heart Institute immediately took steps to secure its 
network and began an investigation with the assistance of an external forensics vendor. The 
investigation determined that an unauthorized third party gained access to The Chattanooga 
Heart Institute’s network between March 8, 2023, and March 16, 2023. On May 31, 2023, The 
Chattanooga Heart Institute learned that the unauthorized third party obtained copies of some of 
the data from its systems containing confidential patient information. It is important to note, 
however, that the unauthorized third party did not retrieve data directly from The Chattanooga Heart 
Institute’s Electronic Medical Record (EMR). 

While The Chattanooga Heart Institute continues to complete an extensive review of the files 
involved, the investigation found that the unauthorized third party may have accessed or 
acquired some information related to The Chattanooga Heart Institute patients or their 
guarantors. The information in the files may have included name, mailing address, email 
address, phone number, date of birth, driver’s license number, Social Security number, account 
information, health insurance information, diagnosis/condition information, lab results, 
medications and other clinical, demographic or financial information. 

Upon discovering the unauthorized third-party access, The Chattanooga Heart Institute took 
quick action to protect its systems, contain the incident, begin an investigation and maintain 
continuity of care. In addition, The Chattanooga Heart Institute notified federal law enforcement. 
Once secured, systems were returned to the network with additional security and monitoring 
tools. 

Notification letters to individuals whose data may be involved will begin to be sent out by US 
mail over the coming weeks as the detailed review of each file is completed. To help relieve 
concerns and restore confidence following this incident, The Chattanooga Heart Institute has 
secured the services of Equifax to provide identity monitoring at no cost to individuals whose 
data may be involved. These identity monitoring services, as described in more detail in the 
individual notification letters being provided to affected individuals, include Credit Monitoring, 
Fraud Consultation and Identity Theft Restoration. 

 



August 22, 2023


Topic Area: Information Technology , Security


Recent Posts

Designing for Patient Rehabilitation and Wellness

Designers can establish a nurturing atmosphere that allows patients to focus on regaining their strength, mobility and independence.


Five Key Strategies to Implementing Automated Hand Hygiene Systems

Hand hygiene is a core policy in healthcare facilities, and AHMMS are one solution to improving compliance.


Adair County Health System Announces Re-Opening Date for Facility

The facility sustained damage from a tornado this past May and has been closed since then.


How to Approach Designing Children's Healthcare Facilities

Designing a children’s healthcare facility brings its own set of challenges.


Sutter Health Reveals Plans to Expand Elk Grove Campus

The plan is to construct a new 56,000-square-foot, two story specialty care center.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.