In December 2019, Monroe County Hospitals & Clinics discovered that several employees had fallen victim to a phishing scheme. Upon investigation, the hospital determined that an unauthorized third party was able to access the email accounts between Oct. 28, 2019, and Jan. 20, 2020.
Patient data that may have been exposed included names, addresses, dates of birth, dates of services, medical record numbers, insurance statuses or payer types, diagnosis codes, reasons for visits and other clinical information. A limited number of Social Security numbers may have also been affected.
Immediately after discovering the phishing attack, Monroe County Hospitals & Clinics had employees reset their email passwords. Additionally, employees have undergone training regarding email cyberattacks.
More articles on cybersecurity:
Texas provider alerts 6,500 patients of phishing attack
Connecticut payer alerts 1,100 members of phishing attack
10 tips for hospitals to mitigate ransomware attacks
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
