Notice to our Patients of Potential Unauthorized Access to Patient Information
United Regional Health Care System (“United Regional”) values the confidentiality and security of our patients’ information. Unfortunately, we are notifying patients about a recent incident that involves patient information.
In July 2019, an unauthorized individual gained access to an employee email account that contained patient information. When learning of the incident, we immediately secured the account, began an investigation, and hired a leading computer forensic firm to assist. Upon completion of the investigation and review of the contents on December 20, 2019, it was determined that patient information could have been accessed as a result of the incident.
Although we have no way of knowing if the unauthorized individual actually viewed any emails or attachments within the account, the information that could have been accessed included patient names, dates of birth, patient account and/or medical record numbers, and clinical information, which may have included provider name and location, lab results, diagnostic, prescription, procedure, and/or treatment information. For a small subset of patients, Social Security numbers, driver’s license numbers, health insurance information, and passport information were also found in the account.
Again, there is no indication that this information was actually viewed by the unauthorized person, or that it has been misused. However, out of an abundance of caution, we mailed letters to affected patients on February 18, 2020, and have established a dedicated call center for patients to call with questions. The call center may be reached at 1-888-222-1962, Monday through Friday, 8:00 a.m. to 5:00 p.m. Central Time.
We recommend that all United Regional patients carefully review any statements that they receive from their health care providers and health insurer. If a patient identifies any services that he or she did not receive, the provider or insurer should be contacted immediately. For eligible patients whose Social Security number or driver’s license number was found in the email account, United Regional is offering complimentary credit monitoring and identity protection services.
We sincerely apologize for any inconvenience or concern this incident may cause you. Please know that we continually evaluate and modify our practices to enhance the security and privacy of our patients’ information.