In November, CNNH discovered suspicious activity within an employee’s email account. Upon investigation, the group determined that an unauthorized third party had accessed the email between Oct. 7 and Nov. 22, 2019.
Patient data that may have been exposed included names, addresses, dates of birth, health insurance information, medical/patient record numbers and treatment and/or clinical information, such as diagnosis, lab tests, dates of services, provider names and prescriptions.
Since the incident, CNNH has enhanced its email security by installing multifactor authentication. The group also continues to educate employees on email security.
There is no evidence that patient information has been misused. CNNH recommends patients review any statements they receive from insurers and healthcare providers.
More articles on cybersecurity:
Health systems should update computer systems in wake of Iran tensions, H-ISAC says
3 cybersecurity predictions for 2020
Former NYC hospital employee pleads guilty to hacking coworkers’ emails
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
