One Medical, a membership-based, technology-enabled primary care practice with more than 2,000 employees, is backed by Google’s parent company Alphabet.
It sent an email out June 30 asking customers to “verify your email,” but the message had more than 980 email addresses copied on the email. The company did not use the blind carbon copy field to mass email its customers, which would’ve hidden their email addresses from each other, according to the report.
In a June 30 statement posted on Twitter, One Medical stated: “We are aware emails were sent to some of our members that exposed recipient email addresses. We apologize if this has caused you concern, but please rest assured that we have investigated the root cause of this incident and confirmed that this was not caused by a security breach of our systems.”
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
