The login issues first occurred Nov. 12 when at least two people logged into their online Vermont Health Connect accounts and found information about another user, according to the report. Department of Vermont Health Access employees flagged the incidents as a “major issue,” but similar incidents also occurred on Nov. 17 and 18, and later on multiple days in December.
The data breaches included names of other applicants and, in some instances, their children’s names, birthdates, annual income and healthcare plans.
A spokesperson for Vermont’s agency of human services told VTDigger that the data breaches were “unfortunate” and said the 10 incidents were “a very uncommon thing to have happen.” Between November and December, 75,000 people visited the website for a total of 330,000 page views.
The security issue was fixed Feb. 17, and users have reported no similar problems since, according to the report.
More articles on cybersecurity:
44% of healthcare cyberattacks caused by network breaches
Medtronic inks cybersecurity partnership to block pacemaker hacking attempts
Massachusetts health system uploaded info of 4,300 patients to unsecured storage network
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
