An outside hacker, claiming to be from within the hospital system, persuaded some St. Vincent Indianapolis Hospital associates to share their e-mail log-in information, giving him or her access to confidential medical information for about 1,800 patients.
The hospital has notified all those patients affected about the potential breach, which could have included their names and certain clinical information.
No patient has reported any problems because of the breach, a hospital spokesman said. The hacker did not have access to patients’ electronic medical records but only to e-mails that clinicians exchanged, some of which contained private information.
St. Vincent became aware of the situation Nov. 15. Since then, it has provided education to its employees and others using its e-mail system to prevent a repeat of the situation.
Any patients with questions about the situation may contact CSIdentity at (800) 805-7004 from 8 a.m. to 8 p.m. CST Monday through Friday.
Star reports
Article source: http://www.indystar.com/article/20110116/LOCAL18/101160410
Category: Government Security Watch