Hackers hit Community Health Systems, a company that operates 206 hospitals across the United States, accessing the records of some 4.5 million patients, reports CNN. What they got, as per the AP: patient names, addresses, birthdates, and phone and Social Security numbers. That affects anyone treated at any location within the last five years. What they didn't get: medical records or credit card numbers.
CHS says that the hack, which used malware to access data, was likely the work of Chinese hackers and occurred in April and June. It says the malware has since been removed and "other remediation efforts" are in place. CNN notes that CHS has a heavy presence in Alabama, Florida, Mississippi, Oklahoma, Pennsylvania, Tennessee, and Texas. (A list of locations is here, though the site appears to be down currently.)