Cybersecurity

Heartbleed Flaw Said Used by Chinese in Hospital Hacking

Lock
This article is for subscribers only.

Chinese hackers exploited the Heartbleed Web-security flaw to steal data on 4.5 million patients of Community Health Systems Inc., the first known breach of a company by use of the vulnerability, said a person involved in the investigation.

Community Health, the second-biggest for-profit U.S. hospital chain, said Aug. 18 that thieves stole patients’ Social Security numbers, names and addresses, without revealing how the hackers got in. The person involved with the probe wasn’t authorized to comment publicly and requested anonymity.