On June 14, the health system discovered R-C Healthcare Management, a vendor providing data reporting optimization services, inadvertently left patient information available online while adjusting its computer network settings from April 18 through April 21.
Bon Secours notified R-C Healthcare of the disclosure, and the vendor immediately took steps to secure the information, according to the health system.
A Bon Secours investigation indicates potentially compromised information includes patient names, health insurers’ names, health insurance ID numbers, limited clinical information, Social Security numbers and some bank account information.
Approximately 655,000 patients were affected in the incident, the majority patients in Bon Secours’ Virginia market, reports Richmond Times-Dispatch.
“We have no knowledge that the information contained within the files has been misused in any way,” according to Bon Secours’ notice.
More articles on data breaches:
Banner Health cyberattack brings layered security strategy into focus
Company issuing health plan ID cards hit with data breach affecting 3.3M
Oregon State Hospital reports breach after clinician texts patient medical data
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.