The health system discovered suspicious activity and unauthorized access to some of its employee email accounts April 8. After identifying the issue, UCSD terminated the unauthorized access and reported the event to the FBI, the health system said.
UCSD is still investigating the incident and declined Becker’s comment request about how many patients were affected by the incident. In the notice, UCSD said it expects to complete its investigation in September.
While the investigation is ongoing, UCSD disclosed that the unauthorized email access occurred between Dec. 2, 2020, and April 8, 2021. The email accounts contained personal information including names, addresses, Social Security numbers, financial account numbers and prescription details of patients, students and employees.
UCSD will send individual notices to all those affected by the breach once the investigation is completed. The health system also is offering one year of free credit and identity monitoring services, according to the online notice.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.