A sophisticated cyberattack on MedFirst Health Systems exposed personal and medical records of approximately 11 million patients across Texas, Oklahoma, and Louisiana.

The ransomware attack encrypted critical hospital systems for 72 hours. Exposed data includes names, Social Security numbers, medical diagnoses, and insurance information.

“This is one of the largest healthcare breaches in recent memory,” said cybersecurity analyst Brian Krebs.