The former employee accessed the medical records outside the scope of their job responsibilities between March 30, 2019, and April 6, 2021.
The hospital discovered the incident April 7 and launched an investigation into the breach. The hospital said it has terminated the employee’s access to all medical record and other systems.
Patient information exposed by the breach included names, mailing addresses, phone numbers, birth dates, lab and imaging results. The breached records did not include Social Security numbers or financial details.