Springs, Fla.-based AdventHealth is notifying 42,161 patients about an August 2017 data breach that may have exposed personal information.
The Office of the Vermont Attorney General posted a copy of the letter AdventHealth sent patients.
The hospital discovered an unauthorized third party gained access to systems at AdventHealth Medical Group Pulmonary & Sleep Medicine at Tavarse (Fla.) Dec. 21, 2018. AdventHealth took immediate action to investigate the breach.
Patient information that may have been affected by the incident includes names, Social Security numbers, gender, race, addresses, emails, phone numbers, dates of birth, health insurance information, heights, weights and medical histories.
Since the incident, AdventHealth has adopted improved processes to enhance auditing and system safeguards.
Editor's note: Becker's reached out to AdventHealth for comment. This article will be updated when more information is available.