Choice Cancer Care Treatment Center in Texas has provided notice of an incident that may have involved the privacy of certain patient information in its care.
While no evidence of actual or attempted misuse of patient information related to this incident has yet been found, Choice Cancer Care has notified patients and has provided information related to its response along with steps individuals may take to protect their personal information.
On May 21, 2019, Choice Cancer Care became aware of suspicious activity relating to a company email account. An investigation was subsequently launched, which included working with a third-party forensic investigation firm, to determine the full nature and scope of the incident.
The investigation confirmed that an unauthorized actor gained access to one email account between May 1st and May 21st, 2019. Based on this determinization and working with these third-party experts, a manual review of the contents of the relevant email account was taken, to determine whether personal information may have been present in the email account at the time of the incident.
On September 18, 2019, the review found that personal information was present in the relevant email account. The healthcare centre then worked to review the records identified within the relevant email account to determine to whom the information related and confirm contact information for those individuals.
While the investigation found no evidence of actual or attempted misuse of information related to this incident, the review did determine that the information present in the affected email account may include patient name and medical or health insurance information. For a small number of individuals, the data may also include driver’s license, social security number, credit card information, and passport number.
Upon learning of this incident, Choice Cancer Care says it quickly took steps to confirm the security of its employee email accounts and commenced thorough and diligent investigation into the nature and scope of the email activity. Furthermore, Choice Cancer Care has said it is now reviewing its policies and procedures relating to data security and conducting additional employee training on data privacy and security.
The post #Privacy: Texas cancer care treatment centre discloses data breach appeared first on PrivSec Report.