Marriottsville, Md.-based Bon Secours Health System is notifying patients of a potential data breach after a vendor inadvertently left patient information accessible on the internet.
On June 14, the health system discovered R-C Healthcare Management, a vendor providing data reporting optimization services, inadvertently left patient information available online while adjusting its computer network settings from April 18 through April 21.
Bon Secours notified R-C Healthcare of the disclosure, and the vendor immediately took steps to secure the information, according to the health system.
A Bon Secours investigation indicates potentially compromised information includes patient names, health insurers' names, health insurance ID numbers, limited clinical information, Social Security numbers and some bank account information.
Approximately 655,000 patients were affected in the incident, the majority patients in Bon Secours' Virginia market, reports Richmond Times-Dispatch.
"We have no knowledge that the information contained within the files has been misused in any way," according to Bon Secours' notice.
More articles on data breaches:
Banner Health cyberattack brings layered security strategy into focus
Company issuing health plan ID cards hit with data breach affecting 3.3M
Oregon State Hospital reports breach after clinician texts patient medical data