PracticeMax Ransomware Attack Impacts 258K at FL Urgent Care Center

Fast Track Urgent Care Center, which has a network of urgent care centers in Tampa Bay, Florida, began notifying 258,411 individuals of a 2021 ransomware attack that originated at its billing vendor, PracticeMax.

As previously reported, PracticeMax discovered suspicious activity on May 1 and later determined that a ransomware attack had occurred between April 17 and May 5. The vendor restored its systems by May 6 but determined that an unauthorized actor had potentially accessed and stolen files containing PHI.

In October, both Humana and Anthem notified some members that their protected health information (PHI) had been exposed following the attack.

PracticeMax notified Fast Track of the incident on May 10, 2021 but could not determine whether any Fast Track patients had been impacted at that time.

“On February 14, 2022, PracticeMax informed Fast Track for the first time that Fast Track’s customer and patient data may have been impacted as a result of the incident. However, PracticeMax’s investigation was still ongoing at that time to determine whether Fast Track customer and patient data had been subject to unauthorized access as a result of the incident,” the notice continued. 

“Finally, on June 6, 2022, PracticeMax confirmed that an unauthorized individual was able to access Fast Track’s customer and patient data.”

The exposed information potentially included names, Social Security numbers, passport numbers, treatment and diagnosis information, driver’s license numbers, birth dates, health insurance information, and financial information.

“Once against Fast Track sincerely regrets any inconvenience that this incident may cause its customers and patients and remains dedicated to protecting their information,” the notice concluded.