On May 13, the hospital learned of the unauthorized access to the medical records and launched an investigation. The report does not indicate the role of the employee, but it says the records accessed were outside of the employee’s duties.
The employee accessed 297 patients’ records that included names, birthdates, medical record numbers, dates of services and diagnostic and treatment information. Additionally, some records may have included patient addresses, telephone numbers and names of health insurers, but no Social Security numbers or financial information was accessed, according to the report.
UH Elyria Medical Center currently has no indication of any fraud, identity theft or misuse of the information, according to the report.
UH Elyria Medical Center did not immediately respond to a request for comments.
More articles on data breaches:
Health IT tip of the day: Don’t let hackers divert your attention from thieves
OPM Director Katherine Archuleta resigns in wake of data breach fallout
OPM data breach affects more than 20M Americans: 4 things to know
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.