The design of KRMC’s website made it vulnerable to access from unauthorized users, which allowed certain individuals to view information including names, dates of birth and information related to medical conditions of some KRMC customers that entered their information into the website, according to the report.
The timeframe that the website was vulnerable to unauthorized users is estimated between November 2016 and April 2019 and affected around 1,100 patients who used the website’s online appointment request feature.
A KRMC spokesperson told Daily Miner that the security incident “in no-way impacted people’s medical records, Social Security numbers or financial information,” and that the hospital’s recently implemented EHR system was unaffected by the incident because it is hosted on a separate server.
KRMC is currently rebuilding its website to incorporate security safeguards, according to a June 7 notice the hospital published on the website.
More articles on cybersecurity:
How senators are responding to Quest Diagnostic data breach and what it means for healthcare cybersecurity
Opko Health alerts 422,600 patients of data breach
27 hospital, health system data breaches in 2019
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.