Data breach at Texas Tech University leaks personal data of 1.4 million patients
And it's already available on the dark web
Here at Tom’s Guide our expert editors are committed to bringing you the best news, reviews and guides to help you stay informed and ahead of the curve!
You are now subscribed
Your newsletter sign-up was successful
Want to add more newsletters?
Daily (Mon-Sun)
Tom's Guide Daily
Sign up to get the latest updates on all of your favorite content! From cutting-edge tech news and the hottest streaming buzz to unbeatable deals on the best products and in-depth reviews, we’ve got you covered.
Weekly on Thursday
Tom's AI Guide
Be AI savvy with your weekly newsletter summing up all the biggest AI news you need to know. Plus, analysis from our AI editor and tips on how to use the latest AI tools!
Weekly on Friday
Tom's iGuide
Unlock the vast world of Apple news straight to your inbox. With coverage on everything from exciting product launches to essential software updates, this is your go-to source for the latest updates on all the best Apple content.
Weekly on Monday
Tom's Streaming Guide
Our weekly newsletter is expertly crafted to immerse you in the world of streaming. Stay updated on the latest releases and our top recommendations across your favorite streaming platforms.
Join the club
Get full access to premium articles, exclusive features and a growing list of member rewards.
Another day, another data breach at a healthcare facility. This time, it’s the Texas Tech University Health Sciences Center (as well as the El Paso division) that has announced they fell victim to a cyberattack back in September.
The September attack disrupted computer systems and applications while “potentially” exposing the combined data of 1.4 million patients including full names, birth dates, physical addresses, Social Security numbers, drivers licenses, government ID numbers, financial account information, health insurance information, medical information, billing or claims data, and diagnosis and treatment information according to a data breach notice released by the Texas Tech University Health Sciences Center.
A month after the hackers got access to the system, the Interlock ransomware gang claimed responsibility for the attack; the threat actors have also leaked a total of 2.6 TB of data allegedly stolen from the HSCs to their extortion portal on the dark web where it is available for download.
Interlock is a ransomware operation that is relatively recent and has distinguished itself for using an encryptor targeting FreeBSD servers along with a Windows variant. Interlock usually demands ransom amounts ranging from hundreds of thousands to millions of dollars depending on the size of the organization according to Bleeping Computer.
Patients who are confirmed to be impacted should be contacted by the university's health and sciences center in order to offer them free credit monitoring services. Those who have had their data compromised by this cyberattack can also contact the toll free dedicated assistance line at 1-866-902-1996.
How to stay safe after a data breach
The HSCs encourages patients to “remain vigilant against potential phishing and social engineering attacks, monitor their credit reports and health insurance billing statements and report any suspicious activity to the authorities.”
The best way to stay safe against phishing is to avoid clicking on any email or message from an unknown sender. Also, make sure you know the policies for your company and double check the sender’s email address: Is this a regular known source or person? Make sure all your devices, including your mobile devices, are protected against malware and threats. We have recommendations for the best Android antivirus apps, but because of Apple’s restrictions there’s no equivalent for the best iPhones.
In order to protect yourself against most common social engineering attacks, it’s always best to be wary of being approached through social media or by contacts offering opportunities or links. Always be diligent about unexpected links, attachments and never open anything from someone you don’t know or are not expecting. If you receive a link or attachment, contact the sender and ask if they’ve sent it and why. And of course, make sure you’re using one of the best antivirus software options available, that it’s kept current and up-to-date and that it has one of the best VPNs with browser-level privacy protection included.
We've seen one data breach after another so far this month which is why you need to be extra careful online ahead of the holidays.
Get instant access to breaking news, the hottest reviews, great deals and helpful tips.
More from Tom's Guide
- Only 3 of the top 150 Android apps can detect reverse engineering tool Frida — here's why that's bad
- Microsoft just fixed 72 Windows security flaws — update your PC right now
- Charging your iPhone? You might want to stay away from third-party USB-C cables

Amber Bouman is the senior security editor at Tom's Guide where she writes about antivirus software, home security, identity theft and more. She has long had an interest in personal security, both online and off, and also has an appreciation for martial arts and edged weapons. With over two decades of experience working in tech journalism, Amber has written for a number of publications including PC World, Maximum PC, Tech Hive, and Engadget covering everything from smartphones to smart breast pumps.
