Kaiser Permanente discovered the breach on Sept. 3 and immediately terminated the unauthorized access to the accounts. An investigation was launched to assess the scope of the incident.
The investigation revealed that the compromised email accounts contained patient information, including names, dates of birth, medical record numbers, and certain medical details. Kaiser noted that no Social Security numbers or financial information were involved in the breach.
Although the health system did not disclose the number of affected patients, it stated that there is no evidence of any misuse of the exposed information. Following the incident, Kaiser Permanente reset the passwords for the affected employees’ accounts to enhance security.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.