Canton, Ohio-based Aultman Hospital said it discovered the breach April 24, when the phishing emails came from the employee’s account without the person’s knowledge, according to a June notice. The hospital secured the account and determined it had likely been accessed from April 22 to April 24.
Aultman Hospital said the hack was limited to the one staffer’s email and did not breach its EHR or disrupt care or operations. The hospital said the phishing scheme was the likely purpose of the hack but can’t rule out the possibility that emails and attachments in the employee’s account were accessed. Those included patient names, dates of birth, addresses, diagnoses and treatment information.
The hospital began notifying affected patients June 21.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
