MEDINA — The medical billing firm that services Orleans Community Health has notified patients of the Medina medical center that an email breach may have exposed personal health information, according to a healthcare industry publication.
Healthcare Resource Group of Spokane, Wash., described as a revenue cycle management services provider, is notifying patients of the breach and offering free access to one year of credit monitoring and identify theft restoration services to individuals affected by the incident, according to a Becker’s Hospital Review, which first reported the breach on Wednesday.
According to the Becker’s report, HRG discovered that an employee’s email account had been accessed by an unauthorized user between Nov. 4 and 30, 2019. A third-party investigation of the incident revealed that certain patient records belonging to Orleans Community Health were present in the account during the time of the unauthorized access.
Patient information that may have been exposed includes names, dates of birth, Social Security numbers, medical record numbers, medical billing or claims information, treatment information and driver’s license numbers, according to Becker’s.
HRG notified Orleans Community Health about the security incident on March 11.
The company said it is unaware of any misuse of the information, reported Becker’s.
The company said it responded to the incident by investigating and assessing the security of its system and also reviewed and enhanced existing policies and procedures, according to Becker’s.
A representative for Orleans Community Health could not be reached late Friday afternoon.
HRG did not respond to a telephone call or emails requesting comment.