{"id":653,"date":"2023-05-01T05:29:00","date_gmt":"2023-05-01T10:29:00","guid":{"rendered":"https:\/\/kentprotect.com\/?p=653"},"modified":"2023-05-02T12:33:41","modified_gmt":"2023-05-02T17:33:41","slug":"breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/","title":{"rendered":"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &#8220;chaos,&#8221; systems crash, and lawsuit"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach&#8217;s start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One Brooklyn Health System and its member hospitals: Interfaith Medical Center, Brookdale Hospital Medical Center, and Kingsbrook Jewish Medical Center, 235,251 patients and individuals, and a threat actor. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">July 9, 2022: Breach starts and threat actor gains initial access to One Brooklyn Health <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">November 19, 2022: Breach leads to &#8220;cyberattack&#8221; operational disruption and ends <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">November 29, 2022: Network is reported to still be offline and patients are being transferred elsewhere (Campanile, 2022)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">December 21, 2022: Multiple news sources report One Brooklyn Health is still &#8220;relying on paper records&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">January 23, 2023: One Brooklyn Health finally publicly confirms data breach amidst public outcry from silence (McGee, 2022; Davis, 2023) <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 21, 2023: One Brooklyn Health discovers PHI and PII were breached in the cyberattack <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">April 20, 2023: One Brooklyn Health posts data breach notice on website and notifies Maine OAG, begins consumer notification <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">April 26, 2023: Class action lawsuit is filed in Kings County, NY against One Brooklyn Health (<em>Johnson v. One Brooklyn Health, <\/em>2023)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One Brooklyn Health System (with several of its hospitals) was breached in July 2022 in a suspected ransomware attack, causing significant operational disruption and the transfer of patients almost four months later (McGee, 2022; Campanile, 2022). &#8220;All computer systems&#8221; were affected and &#8220;chaos&#8221; was reported (Davis, 2023; Campanile, 2022). The Health-ISAC (Health Information Sharing and Analysis Center) reported a public outcry for the hospital&#8217;s silence on the issue as One Brooklyn Health did not publicly confirm the circumstances for some time despite transferring patients and facing severe operational disruption (McGee, 2022; Davis, 2023; Campanile, 2022). The cyberattack resulted in the potential breach of protected health information (PHI) and personally identifiable information (PII) for over 235,251 patients and individuals (Brown, 2023). Breached information potentially included: &#8220;names, Social Security numbers, driver\u2019s license or state identification numbers, dates of birth, financial account information, medical treatment information, prescription information, medical diagnosis or condition information, and health insurance information&#8221; (One Brooklyn Health, 2023). The breach resulted in a class-action lawsuit being filed 6 days after the second major breach notification (<em>Johnson v. One Brooklyn Health, <\/em>2023). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Associated incident response costs, breach notification costs, potential operational costs due to outage, repair, downtime, and lost healthcare business, litigation defense, M-F call center, 12 months of Cyberscout credit monitoring services <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Federal: HIPAA and HITECH <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State: New York N.Y. GEN. BUS. LAW \u00a7\u00a7 349 and 350 (<em>Johnson v. One Brooklyn Health, <\/em>2023, p. 3) <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer) <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer) <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Brown, L. (2023). Data Breach Notifications. In <em>Privacy, Identity Theft and Data Security Breaches<\/em>. Office of the Maine Attorney General. Retrieved May 1, 2023, from https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/73e780c9-ea42-4b82-9d46-41bc962aceb5.shtml<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Campanile, C. (2022, November 29). Computer crash causes chaos at Brooklyn hospitals network with ties to Hochul. <em>New York Post<\/em>. https:\/\/nypost.com\/2022\/11\/29\/it-network-crash-at-brooklyn-hospitals-with-ties-to-hochul\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Davis, J. (2023). Breach notice confirms One Brooklyn Health cyberattack, outage in November. <em>SC Media<\/em>. https:\/\/www.scmagazine.com\/analysis\/breach\/breach-notice-confirms-one-brooklyn-health-cyberattack-outage-in-november<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Johnson v. One Brooklyn Health, NYSCEF DOC. NO. 2 (K.C.N.Y. 2023). https:\/\/s3.documentcloud.org\/documents\/23790655\/johnson-v-one-brooklyn-health-as-filed-complaint-42623.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Lyngaas, S. (2022, December 20). Brooklyn hospital network reverts to paper charts for weeks after cyberattack. <em>CNN<\/em>. https:\/\/www.cnn.com\/2022\/12\/20\/tech\/hospital-ransomware\/index.html<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">McGee, M. K. (2022). Brooklyn Hospitals Decried for Silence on Cyber Incident. <em>Health-ISAC &#8211; Health Information Sharing and Analysis Center<\/em>. https:\/\/h-isac.org\/brooklyn-hospitals-decried-for-silence-on-cyber-incident\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One Brooklyn Health. (n.d.). <em>obh-logo-placeholder.png<\/em>. onebrooklynhealth.org. https:\/\/onebrooklynhealth.org\/media\/e4kfwzu1\/obh-logo-placeholder.png<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One Brooklyn Health. (2023). One Brooklyn Health Provides Notice of Data Security Incident. In <em>onebrooklynhealth.org<\/em>. One Brooklyn Health System. Retrieved May 1, 2023, from https:\/\/onebrooklynhealth.org\/media\/p4abqfwk\/obh-website-notice.pdf<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"One Brooklyn Health suspected ransomware attack and breach results in chaos and lawsuit\" width=\"640\" height=\"480\" src=\"https:\/\/www.youtube.com\/embed\/KSqgQJMPIFI?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>One-sentence summary: One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting<\/p>\n","protected":false},"author":4,"featured_media":655,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[480,3,12,562,559,13,76,63,274,75,61,11,10,74,14,45,43,44,428,561,8,27,563,518,481,225,560,558,67,119,15,81],"class_list":["post-653","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-breach","tag-breach-report","tag-breaches","tag-brookdale","tag-brooklyn","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-data-breach","tag-executive","tag-healthcare","tag-hipaa","tag-hitech","tag-hospital","tag-interfaith","tag-kent-protect","tag-kentprotect","tag-kingsbrook","tag-newyork","tag-ny","tag-nyc","tag-nys","tag-onebrooklynhealth","tag-pwned","tag-ransomware","tag-summary","tag-texas"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &quot;chaos,&quot; systems crash, and lawsuit - Kent Protect<\/title>\n<meta name=\"description\" content=\"One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach&#039;s start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &quot;chaos,&quot; systems crash, and lawsuit - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach&#039;s start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-01T10:29:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-02T17:33:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/obh-logo-placeholder.png\" \/>\n\t<meta property=\"og:image:width\" content=\"405\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &#8220;chaos,&#8221; systems crash, and lawsuit\",\"datePublished\":\"2023-05-01T10:29:00+00:00\",\"dateModified\":\"2023-05-02T17:33:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/\"},\"wordCount\":663,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/obh-logo-placeholder.png\",\"keywords\":[\"breach\",\"breach report\",\"breaches\",\"brookdale\",\"brooklyn\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"data breach\",\"executive\",\"healthcare\",\"HIPAA\",\"HITECH\",\"hospital\",\"interfaith\",\"kent protect\",\"kentprotect\",\"kingsbrook\",\"newyork\",\"ny\",\"nyc\",\"nys\",\"onebrooklynhealth\",\"pwned\",\"ransomware\",\"summary\",\"texas\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/\",\"name\":\"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in \\\"chaos,\\\" systems crash, and lawsuit - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/obh-logo-placeholder.png\",\"datePublished\":\"2023-05-01T10:29:00+00:00\",\"dateModified\":\"2023-05-02T17:33:41+00:00\",\"description\":\"One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach's start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/obh-logo-placeholder.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/obh-logo-placeholder.png\",\"width\":405,\"height\":405,\"caption\":\"One Brooklyn Health logo (image source: One Brooklyn Health, n.d.)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/01\\\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &#8220;chaos,&#8221; systems crash, and lawsuit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in \"chaos,\" systems crash, and lawsuit - Kent Protect","description":"One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach's start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in \"chaos,\" systems crash, and lawsuit - Kent Protect","og_description":"One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach's start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/","og_site_name":"Kent Protect","article_published_time":"2023-05-01T10:29:00+00:00","article_modified_time":"2023-05-02T17:33:41+00:00","og_image":[{"width":405,"height":405,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/obh-logo-placeholder.png","type":"image\/png"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &#8220;chaos,&#8221; systems crash, and lawsuit","datePublished":"2023-05-01T10:29:00+00:00","dateModified":"2023-05-02T17:33:41+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/"},"wordCount":663,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/obh-logo-placeholder.png","keywords":["breach","breach report","breaches","brookdale","brooklyn","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","data breach","executive","healthcare","HIPAA","HITECH","hospital","interfaith","kent protect","kentprotect","kingsbrook","newyork","ny","nyc","nys","onebrooklynhealth","pwned","ransomware","summary","texas"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/","name":"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in \"chaos,\" systems crash, and lawsuit - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/obh-logo-placeholder.png","datePublished":"2023-05-01T10:29:00+00:00","dateModified":"2023-05-02T17:33:41+00:00","description":"One Brooklyn Health suffered a suspected ransomware attack and data breach for over 4 months, resulting in the notification of 235,000+ patients 9 months after the breach's start as well as a public outcry, chaos, systems, crash, and a class-action lawsuit.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/obh-logo-placeholder.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/obh-logo-placeholder.png","width":405,"height":405,"caption":"One Brooklyn Health logo (image source: One Brooklyn Health, n.d.)"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/01\/breach-report-one-brooklyn-health-suspected-ransomware-attack-affects-235000-patients-notified-9-months-after-decried-for-silence-results-in-chaos-systems-crash-and-lawsuit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: One Brooklyn Health suspected ransomware attack affects 235,000+, patients notified 9 months after, decried for silence, results in &#8220;chaos,&#8221; systems crash, and lawsuit"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/653","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=653"}],"version-history":[{"count":4,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/653\/revisions"}],"predecessor-version":[{"id":660,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/653\/revisions\/660"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/655"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=653"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=653"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=653"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}