The former employee accessed patient information outside the scope of their job responsibilities between Sept. 14, 2009, and April 26, 2021. The employee has not been identified but has been fired and no longer has access to patient data, the health system said.
The employee accessed patients’ names, Social Security numbers, health insurance information, addresses, birthdates and treatment information, according to the report.
The employee was not a medical provider and had access to patient records as part of their job coordinating patient care. Aultman is offering patients whose Social Security numbers may have been compromised free credit and identity monitoring services. The health system is also rolling out new training for its employees to prevent similar incidents from happening.
The Aultman Health Foundation includes Aultman Hospital, Aultman Orrville Hospital, Aultman Alliance Community Hospital, health insurance provider AultCare, the Aultman Foundation and Aultman College.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.