UofL Health

UofL Health operates as a healthcare provider entity based in the United States. Its primary function involves delivering medical services to patients, though specific details regarding its core services, geographic scope within the US, or particular market segments served are not elaborated in the provided context. The organisation maintains an internal network and electronic medical records systems critical to its operations. UofL Health relies on third-party software tools for certain functions, such as file transfer operations.

In June 2023, UofL Health was impacted by a significant cybersecurity incident stemming from a vulnerability in the third-party MOVEit file-transfer tool. This mass cyberattack resulted in unauthorized access to files containing sensitive personal information belonging to a small percentage of its patient population. The compromised data included names, dates of birth, Social Security numbers, and other personally identifiable information. Crucially, the investigation confirmed that UofL Health's internal network infrastructure and its core electronic medical records systems were not breached during this event. Following a thorough investigation, UofL Health publicly stated there was no evidence indicating the accessed patient information had been misused following the breach. The organisation issued official communications to provide updates on this privacy incident.