On May 25, 2023, Winslow Memorial Hospital, which does business under the name Little Colorado Medical Center (LCMC”), filed a notice of data breach with the Attorney General of Massachusetts after learning that an unauthorized party carried out a cyberattack resulting in leaked patient data. However, Little Colorado Medical Center is still reviewing the breached data to confirm what was leaked and who it belonged to. Thus, the company will begin sending out data breach notification letters to all individuals who were impacted by the recent data security incident once the investigation is complete.

If you received a data breach notification from Little Colorado Medical Center, it is essential you understand what is at risk and what you can do about it. As we’ve discussed in previous posts, healthcare providers such as LCMC have become a preferred target for many hackers due to the vast amount of confidential information contained on their computer networks. However, these organizations should be aware of cyber threats and should implement robust data security programs to protect patient information. If the pending investigation reveals that Little Colorado Medical Center Breach was negligent in how it cared for patients’ sensitive information, affected patients may be able to bring a data breach lawsuit against the company.

What We Know So Far About the Little Colorado Medical Center Breach

News of the Little Colorado Medical Center data breach is still fresh; however, what we know at this point comes from the company’s filing with the Attorney General of Massachusetts. Little Colorado Medical Center also recently posted a “WESBITE NOTICE” outlining the incident. According to these sources, on April 21, 2022, LCMC became aware of suspicious activity within the company’s computer network. In response, LCMC secured its systems, notified law enforcement, and launched an investigation into the incident.

The LCMC investigation confirmed that an unauthorized actor gained access to portions of the company’s IT systems between March 7, 2022 and April 21, 2022. While Little Colorado Medical Center is still in the process of its investigation, the company notes that information contained within any files that were accessible to the unauthorized party was likely compromised.

On May 25, 2023, Little Colorado Medical Center sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident. While LCMC has not yet confirmed the nature of the leaked data, the company indicates that it will be sending additional data breach letters to patients whose information was subject to unauthorized access.

More Information About Winslow Memorial Hospital

Founded in 1954, Winslow Memorial Hospital, better known as Little Colorado Medical Center, is a non-profit hospital located in Winslow, Arizona. LCMC has 25 beds and treats more than 30,000 patients in Northern Arizona. The hospital offers a range of services, including inpatient services, outpatient services, an emergency room, a multi-specialty clinic, a laboratory, imaging services, an on-site pharmacy, general surgery, obstetrics, surgery, and cardiology. Little Colorado Medical Center employs more than 230 people and generates approximately $33 million in annual revenue.