Health

Health records of hundreds of veterans served by Minneapolis VA exposed in cyberattack

The facade of a large medical building
The main entrance to the Minneapolis VA Medical Center is pictured on Sept. 24, 2024.
Ben Hovland | MPR News file

The federal Veterans Health Administration says hackers may have obtained personal information and health records of more than 600 veterans who use the Minneapolis VA Health System.

In a statement issued Friday, the Veterans Health Administration said its own files were not compromised. But it said a medical transcription vendor — DBP Inc. — was the target of a cyberattack.

Hackers accessed a server and may have copied files with people’s full names, Social Security numbers and medical information, the VHA said.

The statement said 616 veterans who use the Minneapolis VA system were among more than 2,300 veterans nationwide whose information may have been compromised. The VHA said it’s sending letters to everyone affected.

Veterans with questions about the cyberattack and whether their personal information may have been involved can call (844) 838-5433 and leave a message between 8 a.m. and 4:30 p.m., Monday through Friday. The VHA said messages will be returned within two business days.

Officials said DBP, the vendor targeted by the cyberattack, “was able to shut down the server and disconnect it from the internet to prevent further attacks.”

“The vendor purchased new hardware and implemented new security controls on the equipment. The Department of Veterans Affairs continues to work with the vendor to ensure appropriate security measures are in place,” the VHA statement said.