The clinic learned of the attack on Sept. 25, 2014, and investigations discovered the malware infiltrated the server in early August 2012. Central Dermatology Clinic reports having safeguards in place, including software intended to prevent malware.
Investigators said information that “may or may not have been accessed” include patient names, addresses, phone numbers, birth dates, Social Security numbers, billing and diagnostic codes, insurance information, healthcare provider, employer information, treatment data, sex, email addresses and race. Investigators do not believe financial information or EMRs were accessed or compromised.
More articles on data breaches:
Bon Secours Health System reports data breach from unauthorized access by former employee
Highmark subsidiary reports data breach affecting 75k patients
6 considerations for a hospital’s playbook to combat data breaches
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.