1. Unauthorized individuals accessed Beacon employee email accounts, which potentially contained protected health information of some individuals and patients.
2. On March 25, Beacon discovered the unauthorized access of email accounts. Some accounts could have been accessed as early as November 2013. The last unauthorized access occurred on Jan. 26, 2015.
3. Beginning May 22, Beacon began informing affected individuals of the breach.
4. There is no evidence that any sensitive information was viewed or removed from the email accounts. Accessible information included Social Security numbers, date of birth, driver’s license number, diagnosis, date of service and other medical information.
5. Beacon notified HHS and state regulators. The health system is also working with the FBI.
More articles on health IT:
Part of Lahey Health layoffs due to cost of EHR rollout
Patient engagement: Results form a focus group
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.