A hacker stole data from Boston Children’s Hospital, Massachusetts General Hospital, the University of Massachusetts-Boston, and a nursing home in a series of coordinated attacks, the Massachusetts General Medical Association said in a statement Friday.
The hackers gained access to patient and data records, including medical records and social media information, from all hospitals, including the Massachusetts Medical Center and Beth Israel Deaconess Medical Center, the statement said.
The hackers were able to access a database containing information on nearly 400,000 patients, it said.
The hospital was not hit directly, but the data breach has raised concerns about the security of hospitals in Massachusetts and around the country.
The federal government is investigating the breach and whether it was a cyberattack or other form of fraud.
The hacks came just a week after hackers breached hospitals across the country, including in the New York City area, and stole data on more than 20,000 people.
The hacks are believed to have been carried out by groups called the Anthem Cyber Crime Team and the Lazarus Group, which also targeted hospitals in Florida and Virginia.
The Massachusetts General hospital has since released a statement saying it is working to address the security concerns and that the hospital has strengthened its cybersecurity practices.
The hospital has added new safeguards to its systems to help prevent attacks and has taken steps to protect patient and other data, the hospital said.
“We are fully committed to being able to continue to serve our patients and provide them with high-quality care,” the hospital statement said, adding that the breach has been traced to a vulnerability in the hospitals IT system.
The Boston Childrens Hospital has also announced it is offering a free cybersecurity course for new staff members.