In November, the medical center discovered that an unauthorized third-party had gained access to employees’ email accounts. An investigation into the incident is still ongoing; however, Sunrise Community Health determined that the unauthorized individual had access to the accounts between Sept. 11 and Nov. 22.
Patient data that may have been exposed included names, dates of birth, patient identification numbers, provider names, dates of service, types of clinical exams, general exam results, names of health insurers, medication names and diagnoses.
Sunrise Community Health said there is no evidence that patient information has been misused.
More articles on cybersecurity:
Banner Health agrees to pay $6M to settle data breach lawsuit
Florida physician ordered to pay $10K for posting patient info in Yelp review
Amazon has free rein to NHS data