Atrium Health Says "Cyber Incident" Could Impact Patients

Henrietta Strickland
November 30, 2018

According to the notification, AccuDoc told Atrium Health on October 1 that some of its databases were compromised in a cyberattack.

More than two million Atrium Health patients' personal information may have been exposed after a data breach in September.

"The exact number is hard to pinpoint, but based on our investigation it looks like the unauthorized user gained access to databases that had about 2.65 million records".

The compromised database included data of the guarantors and patients, including full names, addresses, dates of birth, insurance policy details, medical record numbers, account balances and dates of service.

The North Carolina billing vendor prepares patient bills and operates the online billing system for Atrium Health, which consists of 44 hospitals throughout North Carolina, South Carolina and Georgia. The records were retained by AccuDoc from payments made at several Atrium Health locations. Those facilities include Blue Ridge HealthCare System, Columbus Regional Health Network, New Hanover Regional Medical Center Physician Group, Scotland Physicians Network and St. Luke's Physician Network. Forensics reports show hackers were not able to actually download or remove the files, they said in a statement.

Sometime between September 22 and 29, hackers gained access to AccuDoc's databases after hacking one of its vendors, ProWord - which AccuDoc has since fired. Both the Federal Bureau of Investigation and a private forensic firm investigated, and Perkins said it doesn't appear any information was stolen.

Atrium Health says it waited to reveal the breach until law enforcement investigated and identified who was impacted. But he said the company determined it was still important to notify patients. They began notifying patients on Tuesday. "Those with Social Security numbers involved in this incident are being offered free credit monitoring and identity protection services", officials from the health system and the company said in a joint statement.

Other reports by Click Lancashire

Discuss This Article