The former employee accessed the records between Nov. 3, 2016, and Oct. 23, 2017. The hospital, which learned about the breach Sept. 12, told the publication that it does not believe any of the information was printed, redirected or misused. However, the hospital said affected patients should be on the look out for suspicious activity.
The compromised data includes: names, age addresses, insurer and medical record numbers, dates patients received care at the hospital, services that were rendered, and diagnosis and other care and treatment information.
An Upstate spokesperson told syracuse.com that he was not aware of the former employee being charged with a crime as a result of the incident. The spokesperson added that it provides in-depth training on the privacy and security of patient information to employees, and said the hospital has strengthened safeguards on patient information.
More articles on cybersecurity:
5 security frameworks hospitals are adopting
SamSam ransomware continues to wreak havoc on healthcare, report finds
1 in 3 ransomware attacks target healthcare companies, report suggests
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.