York Hospital breach compromises PII of 1,400 employees
York Hospital in Maine reported a breach of employees’ identifying information but said patient information was not targeted.
York Hospital in Maine reported a breach of employees' identifying information. The hospital says patient information was not targeted.
How many victims? 1,483 individuals employed by the hospital and its four campuses were affected.
What type of information? Employees' names, addresses, social security numbers, and W-2 forms.
What happened? On Feb 22, 2016, York Hospital discovered that attackers hacked into the hospital's network and accessed the personal identifying information of York Hospital employees.
What was the response? The hospital issued a press release on Feb 24, 2016 and informed victims via notices mailed to the employees' homes, email, and a press release. Identity theft services are available for one year.
Details? York Hospital is working with the FBI's Boston Field Office to identify the attackers. The hospital hired legal counsel.
Quote: “York Hospital was victimized by cyber criminals who fraudulently stole personal identifying information of York Hospital employees. There is no indication at this time that Patient Health information, which is stored on a system separate from staff employment information, was targeted in this attack, nor was any medical information of York Hospital staff compromised.”
Source: York Hospital press release, York Hospital marketing director Jody Merrill.