Phishing email leads to Denver area health care breach

Hackers may have accessed the personal health data belonging to patients of Denver area-based Metro Community Provider Network, a nonprofit health care provider for low-income individuals and families.

How many victims? Approximately 2,000.

What type of personal information? Names, phone numbers, dates of birth, diagnoses and internal account numbers.

What happened? An employee responded to a phishing email that allowed hackers to steal credentials, giving them access to the corporate network.

What was the response? As the organization investigates, employees are being asked to change their login information.

Quote: "Metro Community Provider Network sincerely apologizes for the inconvenience and concern this incident causes," it said in a statement.

 
Source: ModernHealthcare.com, "Colo. provider reports possible breach," Feb. 2, 2012.


POLL

More in The Data Breach Blog

Data on patients may be exposed after X-rays go missing

Data on patients may be exposed after X-rays ...

The sensitive information, including names, addresses, and Social Security numbers, went missing from a third-party vendor's warehouse.

Administrative error exposes personal data of 10,200 neurology patients

A routine email sent to Dent Neurologic Institute patients mistakenly included the sensitive data of others receiving treatment.

Website hack leads to credit card breach of nearly 10K at N.C. medical practice

Website hack leads to credit card breach of ...

Other personal information, such as names, contact information and dates of birth, was also compromised.