Inogen, an oxygen supply device manufacturer, is notifying 30,000 existing and former customers their personal data may have been improperly accessed, Reuters reports.
An unauthorized party may have accessed an employee's email account between Jan. 2 and March 14. Potentially compromised information includes rental customers' personal information such as names, contact details, Medicare identification numbers and insurance policy information, as well as some non-public financial information.
The affected information did not include payment card details or medical records.
Inogen hired a forensic firm to investigate, and it said its insurance policy may not be enough to cover all the costs associated with the incident.
More articles on cybersecurity:
Black Book: Duplicate patient records cost hospitals almost $2k per inpatient stay
EHR tool prompts patient care for chronic kidney disease: 4 study insights
CarePort Health to manage Allscripts' care management portfolio: 4 things to know