The burglary occurred Nov. 7. Aspire Indiana notified law enforcement and began a data forensic investigation. The investigation is still ongoing, but it has revealed that emails stored on the laptops may have contained names, addresses and Social Security numbers for employees and a “limited number” of clients, according to a news release. Additionally, clients’ medical record numbers and “limited” personal health information related to internal business purposes may be contained on the laptops. No electronic medical records were on the laptops.
Aspire Indiana says there is no evidence that any of the compromised information has been misused.
“Our organization is committed to maintaining the privacy and security of the personal information in our control, and we sincerely regret this incident occurred,” said Rich DeHaven, president and CEO of Aspire Indiana. “We have taken steps to enhance our security, including upgrading our alarm and security systems. We remain committed to continually improving our IT and physical security to further protect our data and our clients.”
More articles on data breaches:
The hospital’s guide to getting hacked
In breach event, to whom should CISOs report?
Anthem breach stemmed from weak login security
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.