Four details:
1. UMPhysicians found the two accounts were hacked on Jan. 30-31 and Feb. 4. The unauthorized party had access to the email accounts for a short period of time, according to the Nov. 25 statement.
2. The organization was not able to determine what information was accessed during the cyberattack. The employee email accounts contained patient information including names, birth dates, the date of service and payment card number.
3. The email accounts included Social Security numbers for some patients, according to the statement. UMPhysicians does not have evidence that information was misused or copied.
4. The incident affected 683 individuals who were notified about the incident in March.
More articles on cybersecurity:
Nearly 1M health records breached in November
California medical center server issue exposed patient data for 4.5 years
5 hospital, health system malware, ransomware and phishing incidents in November