The data breach affects patients who used the online appointment request form, which may have sent “certain limited information” to third-party service providers, according to a Jan. 13 notice on the health system’s website. UCLA Health began using the analytics tools in April 2020 to track engagement but disabled them last June.
The captured data may have included names, addresses, phone numbers and provider names, UCLA Health said. The incident did not involve the myUCLAhealth patient portal.