An employee at Independent Health emailed the information of 7,600 members on March 19 to an unauthorized individual, according to local NBC affiliate WGRZ.
The individual who received the email of members' information was a fellow Independent Health member. The recipient notified Independent Health that the email had been deleted, a spokesperson from the company told WGRZ.
Member information that was exposed included names, identification numbers, names of providers seen, dates of service, claims numbers, claims payment information and medical procedure codes.
Independent Health believes the risk of identity theft is low, as the email did not include Social Security numbers or financial information.
More articles on cybersecurity:
Oregon State Hospital alerts patients of phishing attack
Memorial Hermann employee 'improperly' used patients' credit card info
First cybercrime hotline unveiled in Rhode Island