From Aug. 21 to Sept. 17, 2021, an unauthorized party accessed an employee email account at the Lake Mary, Fla., hospitalist group, it said. It discovered the breach May 5.
The account contained patients’ personal and protected health information, including diagnoses and treatment records, and in a limited number of cases, Social Security numbers and financial account information, according to the company.
The organization said the incident did not affect all of its clients and it has no evidence that any of the data has been misused.
Central Florida Inpatient Medicine is telling affected patients to review financial and medical statements for fraudulent activity. In response to the breach, the group said it has added technical safeguards to its email system, instituted multifactor authentication and provided more training to employees on the risks of malicious emails.
Editor’s note: This article was updated June 17 at 12:55 p.m. CT.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.