3 phishing hacks breach 20,000 Catawba Valley patient records

While investigating one phishing attack in August, medical center officials discovered a hacker had access to three accounts for more than a month. Officials discovered unauthorized access on an employee email account on Aug. 13 and immediately secured the account and launched an investigation with help from a third-party forensic firm. The investigation determined it was not one but two accounts hacked for more than a month between July 4 and August 17.The investigation found those email accounts included patient names, dates of birth, medical data and health insurance information, according to officials. Social Security numbers were included for some patients.Catawba Valley began notifying patients on Oct. 12 and created a dedicated call center to handle patient questions about the breach. Officials are recommending patients review any statements they receive from their insurance carrier to make sure theyre not billed for any services they didnt receive.

Source: https://www.healthcareitnews.com/news/3-phishing-hacks-breach-20000-catawba-valley-patient-records