Thirty-three invoice documents were mistakenly mailed to 18 addresses between Dec. 22 and April 2, the hospital reports. In total, 2,827 patient names were compromised.
Potentially exposed information includes patient names, provider names, service dates and a description of medical services. No financial information, health insurance information, treatment information, birth dates, Social Security numbers or medical record numbers were included in the documents, according to the hospital.
“UNMHospital is committed to protecting the privacy and confidential health information of all of our patients, and we take this incident very seriously,” said Sarah Morrow, chief privacy officer at the UNM Health Sciences Center, in a statement. “We have thoroughly investigated and identified the technical issues that [led] to the erroneous mailings, and we are monitoring the system to ensure this does not happen again.”
More articles on data breaches:
Unhealthy rise in healthcare privacy breaches: 5 tips to stay ahead of patient privacy threats
Vendor misconfiguration breaches Children’s National Health System patient data
Florida Medical Clinic notifies 1,000 patient of data breach after Greenway Health mistake
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.