The physicians responded to the phishing emails believing they were from legitimate sources. Some of the physicians who responded to the phishing emails had patient information in their email accounts, according to the notification.
The email accounts contained patients’ names, addresses, dates of birth, treating physician, diagnoses, medical record numbers, medical service codes and health insurance information. A few patients’ Social Security numbers were also included in the email accounts, according to the notification.
Baylor Regional Medical Center discovered the phishing scheme in February, and immediately began an investigation. The medical center sent letters to affected patients April 25, 2014, according to the notification.
More Articles on Data Breaches:
Molina Healthcare Contractor Compromises 5,261 Former Patients’ Personal Information
Flowers Hospital Employee Steals Patients’ Information
More Than 1,300 DeKalb Health Patients’ Information Compromised By Cyberattack, Phishing Scheme
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.