A ransomware attack April 18 at Airway Oxygen in mid-Michigan has resulted in breach notifications being sent to 500,000 current and past patients, as well as 1,160 current and former employees of Airway and a sister company.
The company was unusually candid and forthcoming in its explanation of the attack, believed to have been carried out from an offshore location. The notification letter includes an expansive Q&A covering who was responsible for the breach, how it was discovered, how long hackers were in the system, if the hack could have been prevented, data that was stolen and whether anyone has been adversely affected, among other questions.
