Coral Gables-based Baptist Health South Florida said its patient data was compromised in a hack of EHR vendor Oracle Health.
Baptist Health said it learned in March that an unauthorized party had accessed and stolen some of its patient records stored on Oracle Health (formerly Cerner) systems as early as Jan. 22, according to a July 29 notice. Federal law enforcement had asked that affected organizations delay patient notification amid the investigation.
The patient data may have included Social Security numbers and medical records such as diagnoses, medications and treatments.
“We sincerely apologize for this incident and assure you that protecting your information remains a top priority for Baptist Health,” the health system said in a statement on its website.
Baptist Health is the latest health system to disclose it was ensnared in the Oracle Health breach, joining Terre Haute, Ind.-based Union Health, Tallahassee (Fla.) Memorial Healthcare and St. Joseph, Mo.-based Mosaic Life Care. Healthcare organizations in California, South Carolina and Texas were also impacted.