Banner Health revealed that hackers may have accessed the healthcare, payment and health plan information of up to 3.7 million individuals.
Attackers reportedly gained access through payment processing systems for food and beverage purchases at the Phoenix-based health system.
“On July 13, 2016, we discovered that cyber attackers may have gained unauthorized access to information stored on a limited number of Banner Health computer servers,” Banner Health said in a statement. “We immediately launched an investigation, hired a leading forensics firm, took steps to block the cyber attackers, and contacted law enforcement. The investigation revealed that the attack was initiated on June 17, 2016.”