Exclusive: Texas Tech University Health Sciences Center El Paso Data Breach Exposes 1.4 Million Records

Incident Overview

In September 2024, Texas Tech University Health Sciences Center El Paso (TTUHSC El Paso) experienced a significant cybersecurity incident that compromised the personal and medical information of approximately 1.4 million individuals. The breach occurred between September 17 and September 29, 2024, affecting both the El Paso and Lubbock campuses.

Discovery and Containment

TTUHSC El Paso identified disruptions in its computer systems and applications in late September 2024. An immediate investigation confirmed unauthorized access to the network, resulting in the potential removal of sensitive files and folders. The institution promptly secured its systems, initiated a comprehensive review, and began notifying affected individuals.

Data Exposure Details

The compromised data varies by individual but may include:

• Full name
• Date of birth
• Phone number
• Race
• Gender
• Address
• Medical condition
• Facility Visited

The Interlock ransomware group claimed responsibility for the attack, alleging the theft of approximately 2.6 terabytes of data.

Impact on Individuals

The breach has exposed individuals to risks such as identity theft, financial fraud, and medical identity theft. TTUHSC El Paso has offered complimentary credit monitoring services to affected individuals and established a dedicated assistance line at 1-866-902-1996.

Institutional Response

In response to the breach, TTUHSC El Paso has:

• Reviewed and enhanced existing security policies and procedures.
• Implemented additional safeguards to protect systems.
• Notified relevant regulators and stakeholders.
• Provided resources and support to affected individuals.

The institution continues to work with cybersecurity experts to prevent future incidents and ensure the security of its network.

Ongoing Investigations and Legal Actions

Multiple law firms have initiated investigations into the breach, exploring potential class-action lawsuits on behalf of affected individuals. However, Texas Tech University Health Sciences Center, as a state institution, may have certain immunities from class-action lawsuits under state law. Any litigation pursued will need to address these potential legal hurdles.

These legal actions aim to address concerns over the security of personal and protected health information.

For more information and updates on this incident, please visit TTUHSC El Paso's official notice.