An employee email account from Orlando (Fla.) Health was accessed by an unauthorized user, which may have compromised the information of 3,662 patients.
On Aug. 5, the health system learned that an unauthorized user had access to the email account between July 5 and July 13, according to a breach notification from Orlando.
It wasn't until Sept. 19 that Orlando found out the email contained patient information such as demographic and clinical information, and, in some instances, health insurance ID numbers and Social Security numbers.
On Nov. 18, the health system began mailing letters to the affected individuals, but said it believes none of the compromised information has been misused.
Orlando Health has since secured the employee's email account, and the system said it is reinforcing education with staff and implementing additional security enhancements to its email environment.