The nonprofit health system discovered June 6 that an unauthorized third party gained access to employees’ email accounts. Upon investigation, Presbyterian learned the email account stored information for 183,370 patients.
Patient data that may have been affected includes names, dates of birth, Social Security numbers and clinical and health plan information. Presbyterian is recommending patients check their statements from providers and health plans for signs of data misuse.
Since the phishing attack, Presbyterian has adding security to protect its email system. Employees are now required to undergo annual security training and are sent reminders about cybersecurity threats.
More articles on cybersecurity:
AMCA data breach scope expands, Florida lab testing company alerts 30,000 patients
Arizona State University alerts 4,000 students of data breach
Patient records at Connecticut health system potentially exposed in shipping mishap