Cybersecurity incident — 2018-02-21 00:00:00
Affected organization: University of Virginia Health System (uvahealth.com)
Affected country: United States of America
Industry: Health Care and Social Assistance
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

The University of Virginia Health System notifies almost 2,000 patients that their health records may have been exposed when an unauthorized third party implanted malware on a staffer's computer active between May 2015 and December 2016.