According to a July 22 news release from the health system, the breached emails were work-related messages dealing with payment and billing coordination for patients. The emails contained some patient-protected health information including names, medical record numbers, addresses, dates of birth, diagnostic and treatment information, and/or health insurance information.
Michigan Medicine said during its investigation into the incident that it did not find any evidence to suggest that the cyberattack’s mission was to obtain patient health information, but that it could not rule out data theft.
Michigan Medicine said the email accounts did not contain any credit card, debit card or bank account numbers. Although four patients, according to the release, did have their Social Security numbers compromised.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
