A southwest Colorado health system is recovering from a ransomware attack, but its leaders haven’t said what may happen to patients’ data.
A on Monday afternoon said the system had experienced a “cyber incident” and was still investigating. It said the clinics would send letters to their patients if hackers accessed their data.
The group’s patient portal was offline as of Monday afternoon. An Axis spokesperson didn’t respond to questions about the incident.
Axis operates 13 mental health and addiction treatment facilities in southwest Colorado, including locations in Durango, Pagosa Springs and Montrose. It also offers primary care and some dental services.
A ransomware group known as Rhysida claimed responsibility on Oct. 10 and gave Axis until Thursday to pay about $1.58 million in bitcoin, or else the group would expose patients’ data, ., formerly known as Twitter, offered a chance to bid on the data, but didn’t specify what it might include.
