The bag was discovered Sept. 26 and IU Health retrieved it within hours. It contained paperwork with patient names, physicians’ names, birthdays, genders, medical record numbers, dates and times of service, diagnoses and procedures. However, no medical records, financial information or social security numbers were included.
Only patients who had procedures at IU Health Ball Memorial Hospital and nearby facilities between July 9, 2012 and April 25, 2017 are potentially affected.
Although hospital officials do not have any evidence the information in the bag had been improperly accessed or used, the hospital sent letters to the affected patients Nov. 3.
Becker’s Hospital Review has reached out to IU Health Ball Memorial Hospital for comment. This story will be updated as more information becomes available.
More articles on cybersecurity:
Employee wrongdoing at Valley Family Medical exposes data on 8.5k patients
Ransomware tops health technology hazards for 2018 list
Cybercrime tops Americans’ crime worries
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.