The Hawaii Department of Health found that an unauthorized individual used an account belonging to a former medical certifier at a Hawaii hospital to access the electronic death registry system.
The individual accessed the account Jan. 20 and viewed 3,400 death records.
The records contain the name, Social Security number, address, sex, date of birth, date of death, place of death and cause of death, according to a March 9 Hawaii Department of Health news release.
Cybersecurity threat intelligence company Mandiant first identified the breach.