Community Health learned that patient information such as computer IP addresses; names; medical records numbers; dates, times and locations of scheduled appointments; healthcare provider information; type of appointment or procedure; and communications through MyChart were compromised after it had implemented third-party tracking technologies on its website and MyChart patient portal, according to a Nov. 16 breach notification from Community.
This patient information was collected and transmitted to tracking vendors, such as Facebook, parent company Meta, and Google.
Patient information such as Social Security numbers, financial account numbers or debit card information was not collected or transmitted as part of the breach, according to Community.
Community said it has since removed the tracking tools on patient-facing websites and applications and is working to notify those who have been affected.
The number of affected patients was not disclosed.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.