The hospital posted the spreadsheet on Jan. 6 to comply with government requirements about medical cost disclosures. However, on March 12 the hospital realized the spreadsheet contained PHI of select patients, including the patients’ names, diagnoses, health history and treatment history.
The hospital notified 3,683 patients that their information had been exposed on April 28. The health system is not aware of any information being misused as a result of the incident.
More articles on cybersecurity:
Healthcare Resource Group alerts New York med center patients of records breach
Nebraska Medical Center employee wrongly accessed EHR, affecting 1,311 patients
7 hospitals whose employees wrongfully viewed patient records
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.