On Jan. 9, the health system learned that two employee email accounts were accessed by unauthorized users due to a phishing attack, according to a March 8 news release on UC San Diego’s website.
The health system said after the breach it was able to secure the email accounts and launch an investigation into the incident. Through the investigation, UC San Diego Health learned that the unauthorized access occurred between Jan. 9 through Jan. 22 and that the hackers accessed information of patients in its lung transplant and rheumatology departments.
The compromised information includes patients’ names, addresses, email addresses, dates of birth, medical record numbers, health insurance information, treatment cost information, and clinical information.
Some patients had their Social Security numbers compromised as well, according to the health system.
UC San Diego Health said it is mailing notification letters to all individuals whose information may have been involved.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.