An unauthorized individual accessed an employee email account from Sparta (Ill.) Community Hospital District that contained some protected health information.
On March 28, Sparta noticed suspicious activity on an email account and launched an investigation into the incident, according to a May 28 press release from the hospital.
The investigation determined that the unauthorized user accessed an employee email account between March 27 and March 28.
The email account contained patients' names, addresses, phone numbers, dates of birth, medical record numbers, physicians' names, medical diagnosis and limited treatment information.
No financial information or Social Security numbers were affected, according to Sparta.
Sparta did not detail how many patients were affected, but said it has secured the email since the breach and is notifying all affected individuals.