The Texas Tech University Health Sciences Center (TTUHSC) has confirmed that hackers have accessed the personal and sensitive health data of over 1.4 million individuals during a cyberattack in September.

The cyberattack, which also impacted TTUHSC’s El Paso campus, resulted in attackers stealing information such as Social Security numbers, financial account details, government-issued ID information, and health data. This includes medical record numbers, billing information, as well as diagnosis and treatment details, according to a notice on a dedicated website. Currently, the TTUHSC’s security incident website has “noindex” code, preventing search engines from indexing the page and making it harder for affected individuals to locate it in search results.
Information on the U.S. Department of Health’s data breach portal confirms that the university is informing 1.46 million individuals about the compromise of their data in the breach. According to Bleeping Computer, the Interlock ransomware group has claimed responsibility for the cyberattack. In a post on its dark web leak site, viewed by TechCrunch, the group states that they have released 2.1 million files stolen from TTUHSC, totaling 2.6 terabytes of data.