Particle.news

Cerballiance Discloses Cyberattack Exposing Patient Data on Outsourced Server

The breach highlights persistent third‑party weaknesses in healthcare IT.

Overview

  • Cerballiance, which disclosed the breach Friday, said an intruder accessed data in late March on a server run by an outside IT provider.
  • The exposed information can include identity details, patient‑portal logins, some lab reports, and France’s social security number.
  • The network says it alerted authorities, emailed the patients involved, disabled their portal passwords, and told the vendor to shut down the affected server.
  • The company has not said how many people were affected and says it has seen no confirmed reuse, urging patients to watch for unusual calls or emails.
  • Cerballiance says it tightened safeguards with the vendor after a similar incident last year with another provider, and its scale—about 700 labs serving roughly 28 million patients annually—makes such supply‑chain lapses especially risky.