Mountain View, Calif.-based El Camino Health is notifying patients of a data security incident involving unauthorized access to four employees’ Microsoft 365 accounts.
The health system identified unusual activity in its Microsoft 365 environment Sept. 1 and launched an investigation with third-party forensic experts. The investigation found that an unauthorized party intermittently accessed four employee accounts between Aug. 26 and Sept. 2, during which certain documents were copied or downloaded. El Camino Health has not disclosed how the unauthorized party gained access to the accounts.
Some of the affected documents contained patients’ personal, medical and financial information, according to an Oct. 30 breach notification.
Information potentially compromised includes names, contact information, demographic information, dates of birth, Social Security numbers, driver’s license numbers, medical record numbers, patient account numbers, diagnoses, treatments, prescriptions, provider names, dates of service and health insurance information. Financial account and routing numbers may also have been involved for some patients.
The types of information involved vary by individual.
El Camino Health said its EHR system was not involved in the incident.
The health system began mailing notification letters to affected patients Oct. 30. Its review of the compromised documents remains ongoing, and additional patients will be notified if their information is identified.
The total number of affected patients has not been disclosed. The incident was also reported to the California attorney general’s office Oct. 30.
El Camino Health said it secured the affected system, notified law enforcement and implemented additional technical safeguards and monitoring measures.
The health system is offering complimentary credit monitoring and identity theft protection services through Experian to individuals whose Social Security or driver’s license numbers may have been involved.
Affected patients are encouraged to review medical and insurance statements for unfamiliar services and monitor financial accounts for suspicious activity.
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
