- LifeBridge Health, a healthcare provider located in northwest Baltimore, has notified more than 500,000 patients that their personal information may have been exposed in a September 2016 healthcare data breach, the provider said in a statement emailed to HealthITSecurity.com on May 22.
Information that could have been exposed included patients' names, addresses, dates of birth, diagnoses, medications, clinical and treatment information, insurance information, and, in some instances, Social Security numbers.
On March 18, LifeBridge Health detected malware on the server that hosts electronic medical records of Potomac Physicians, one of its physician practices, and the shared registration and billing system for some other LifeBridge Health providers.
The healthcare provider engaged a forensic firm, which determined that an unauthorized third party had access the server in September 2016.
“We understand that patients may have concerns about their information, so we have opened a dedicated call center. Additionally, for patients whose social security numbers may have potentially been involved, LifeBridge Health is offering one-year, complimentary credit monitoring and identity protection services,” the provider said in the statement.
On May 16, LifeBridge Health issued a press release in which it said it was sending letters to affected patients but did not disclose the number of potential victims.
“At this time, LifeBridge Health and LifeBridge Potomac Professionals has no reason to believe that the patient information has been misused in any way,” the release said.
“LifeBridge Health also recommends that patients review their billing statements and explanation of benefits they receive. If patients see services that they did not receive, they should contact the provider or insurer immediately,” the release said.
“To help prevent something like this from happening again, LifeBridge has enhanced the complexity of its password requirements and the security of its system,” LifeBridge added.
LifeBridge Health includes Sinai Hospital of Baltimore, Northwest Hospital, Carroll Hospital, Levindale Hebrew Geriatric Center and Hospital and its subsidiaries and affiliated units, including LifeBridge Health & Fitness and the LifeBridge Medical Care Centers in Eldersburg, Mays Chapel, and Reisterstown, Maryland.