The health system detected a data security incident on Dec. 30 and confirmed on March 20 that an unauthorized third party may have had access to patients’ protected health information. The breached information may have included patient names, medical histories, medical records, clinical information and dates of service as well as health insurance information and prescription information.
The health system reported that no financial information was breached and there is no evidence that the information was misused.
More articles on cybersecurity:
BJC HealthCare reports employee email breach exposes PHI for 19 facilities: 5 details
Former Lurie Children’s employee wrongfully viewed 4,824 patient records
The IT behind hospitals’ battle with COVID-19: How tech maximized efficiency amid rapid workflow changes