Lorien Health Services

Lorien Health Services, operating as Lorien, is a United States-based health services provider. The organization delivers care to residents, managing sensitive personal and health information as a core part of its operations. Its work involves the handling of protected health data and employee records, situating it within the healthcare sector where data security is a critical operational component. The scale of its data holdings is evidenced by a major security incident affecting nearly 48,000 individuals, indicating a substantial repository of personal information tied to its clientele and workforce. This incident underscores the organization's role in managing large volumes of sensitive data within a regulated environment.

In June 2020, Lorien Health Services was the target of a ransomware attack executed by Netwalker cybercriminal operators. The attack involved both the encryption of the organization's systems and the theft of data. Following the attack, Lorien refused to pay the ransom demand. Consequently, the attackers began leaking the stolen information online, releasing a partial dataset labeled "Part 1" and threatening further disclosures. The leaked data included residents' personal and health details alongside employee records. In response to the incident, Lorien engaged external cybersecurity experts to investigate the breach. The organization proactively notified all affected individuals, which numbered nearly 48,000, and offered complimentary credit monitoring services to mitigate potential harm from the data theft. Lorien also cooperated fully with law enforcement agencies throughout the investigation into the attack.