Indianapolis-based Indiana University Health detected unusual activity on a team member's email account, potentially compromising limited patient information.
The breach was identified on Oct. 18, prompting IU Health to secure the affected account and launch an investigation. The health system also enlisted an external forensics firm to confirm account security and assess the scope of the issue. Investigators determined an unauthorized party accessed the email account from Oct. 4 to Oct. 18, according to a Dec. 17 news release.
The compromised information varied by individual but may have included addresses, ages, medical record numbers, diagnoses, or other treatment-related information. Financial and Social Security data were not involved, IU Health said.
As a precaution, the health system is encouraging affected individuals to verify the legitimacy of any requests for personal or health-related information.
IU Health began notifying impacted individuals on Dec. 17 and has established a dedicated call center to address concerns.