3AM ransomware stole data of 464,000 Kootenai Health patients

Share:

Kootenai Health has disclosed a data breach impacting over 464,000 patients after their personal information was stolen and leaked by the 3AM ransomware operation.

Kootenai Health is a not-for-profit healthcare provider in Idaho, operating the largest hospital in the region, offering a wide range of medical services, including emergency care, surgery, cancer treatment, cardiac care, and orthopedics.

The organization is notifying patients who received care at its facilities that it detected a cyberattack in early March 2024, which disrupted certain IT systems.

An ongoing investigation shows that the cybercriminals gained unauthorized access to Kootenai’s systems on February 22, 2024, allowing the threat actors ten days to roam the network and steal sensitive data.

“On March 2, 2024, Kootenai Health became aware of unusual activity that disrupted access to certain IT systems,” reads the notification submitted to Maine’s AG Office.

“The investigation revealed that an unknown actor may have gained unauthorized access to certain data from the Kootenai Health network on or about February 22, 2024.”

The examination of what data has been stolen as a result of this breach was concluded on August 1, confirming the following as exposed:

  • Full names
  • Dates of birth
  • Social Security numbers (SSNs)
  • Driver’s Licenses
  • Government ID numbers
  • Medical record numbers
  • Medical treatment and condition information
  • Medical diagnoses
  • Health insurance information

Kootenai Health states that it’s unaware of any misuse of the stolen information. It also enclosed instructions for impacted individuals to enroll in 12-24 months of identity protection services, depending on what data was exposed.

Patients may also visit the hospital’s announcement published on the Kootenai Health website for more information and support links.

3AM ransomware leaks the data

The 3AM ransomware gang has claimed responsibility for the attack and leaked stolen data on its darknet portal, indicating that a ransom was not paid.

The stolen data consists of a 22GB archive, available for free, allowing any other cybercriminal to download the data and utilize it in further attacks.

3AM is a Rust-based ransomware strain first reported in September 2023, seeing limited deployment as a fallback option for when more proven lockers failed.

In January, Intrisec analysts reported seeing notable links between 3AM, Conti, and the Royal ransomware gangs, suggesting some association between the three gangs.

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
11:59 am, Jul 11, 2025
weather icon 29°C
L: 27° | H: 31°
few clouds
Humidity: 44 %
Pressure: 1020 mb
Wind: 7 mph E
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 13%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 4:56 am
Sunset: 9:15 pm
DailyHourly
Daily ForecastHourly Forecast
Today 10:00 pm
weather icon
27° | 31°°C 0 mm 0% 8 mph 47 % 1020 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
18° | 30°°C 0 mm 0% 9 mph 65 % 1018 mb 0 mm/h
Sun Jul 13 10:00 pm
weather icon
17° | 27°°C 0 mm 0% 7 mph 73 % 1014 mb 0 mm/h
Mon Jul 14 10:00 pm
weather icon
20° | 29°°C 0 mm 0% 14 mph 71 % 1017 mb 0 mm/h
Tue Jul 15 10:00 pm
weather icon
15° | 27°°C 0 mm 0% 13 mph 71 % 1021 mb 0 mm/h
Today 1:00 pm
weather icon
29° | 29°°C 0 mm 0% 3 mph 44 % 1020 mb 0 mm/h
Today 4:00 pm
weather icon
29° | 31°°C 0 mm 0% 5 mph 39 % 1019 mb 0 mm/h
Today 7:00 pm
weather icon
28° | 28°°C 0 mm 0% 5 mph 33 % 1018 mb 0 mm/h
Today 10:00 pm
weather icon
22° | 22°°C 0 mm 0% 8 mph 47 % 1019 mb 0 mm/h
Tomorrow 1:00 am
weather icon
18° | 18°°C 0 mm 0% 4 mph 55 % 1018 mb 0 mm/h
Tomorrow 4:00 am
weather icon
19° | 19°°C 0 mm 0% 4 mph 65 % 1018 mb 0 mm/h
Tomorrow 7:00 am
weather icon
19° | 19°°C 0 mm 0% 6 mph 64 % 1018 mb 0 mm/h
Tomorrow 10:00 am
weather icon
24° | 24°°C 0 mm 0% 6 mph 45 % 1017 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€100,951.88
6.41%
Ethereum(ETH)
€2,570.45
8.07%
Tether(USDT)
€0.85
0.01%
XRP(XRP)
€2.26
8.40%
Solana(SOL)
€140.95
4.52%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.170470
10.12%
Shiba Inu(SHIB)
€0.000012
7.69%
Pepe(PEPE)
€0.000011
15.18%
Peanut the Squirrel(PNUT)
€0.250006
20.15%
Scroll to Top