Mercy Health warns patients of data breach at RCM vendor

Mercy Health Lorain (Ohio) Hospital is alerting patients that their protected health information may have been exposed in a data breach at a revenue cycle management vendor.

Advertisement

In November, RCM Enterprise Services discovered that medical invoices were mailed to patients with incorrect information. Instead of including names, street addresses, cities, states and zip codes, the invoices listed names, street addresses and Social Security numbers.

The invoices with Social Security numbers were mailed between Aug. 14 and Oct. 16. RCM Enterprise Services has begun alerting hospitals and health systems whose patients may have been affected.

There is no evidence that patients’ Social Security numbers have been misused. RCM Enterprise Services is offering patients credit and identity monitoring. The company also recommends patients review any financial statements.

“We take this incident, as well as information privacy and security, very seriously, and have enhanced our procedures in order to prevent the occurrence of a similar incident,” said Barbara Shaub, director of revenue cycle management at RCM Enterprise Services.

More articles on cybersecurity:
Health systems should update computer systems in wake of Iran tensions, H-ISAC says
3 cybersecurity predictions for 2020
Former NYC hospital employee pleads guilty to hacking coworkers’ emails

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.

Register to Attend Webinar

Designing the intelligent hospital: Building hospitals around people, data and care

Tuesday, July 21
12:00 PM - 1:00 PM CDT

Presenters: Braheem Santos, Schneider ElectricJohn Donohue, Penn Medicine

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.