Beaumont Health announced Tuesday that 6,000 patients have been affected by a data breach at the company. The hospital network was notified of the breach on July 28.
As a first step, Beaumont disabled the compromised email accounts and requested a mandatory password reset. The hospital network is now working with an outside cybersecurity firm to address the incident. The investigation , conducted by the security firm, found that one or more of the accounts compromised between January 23 and 29 contained personal patient information, including health information.
“Our investigation was unable to definitively determine whether any information was viewed or obtained by an unauthorized third party, and Beaumont did not discover any inappropriate use of data by unauthorized individuals. Beaumont’s electronic medical records system was not impacted by this incident and remains secure. However, out of an abundance of caution, we are issuing notices to anyone whose information may have been included in the compromised accounts,” Beaumont said.
Some patient names, birth dates, diagnoses, procedures, treatment locations, treatment types, prescription information, and account numbers were leaked from the breach.
The breach affected about 0.3% of Beaumont's 2.3 million patients. The company suffered another breach in 2019.
