Phoenix Children's Hospital began notifying 1,860 patients Jan. 14 that their information may have been exposed in a phishing attack.
In November 2019, the hospital discovered that seven employee email accounts had been accessed by an unauthorized third party. Upon investigation, Phoenix Children's determined that the email accounts may have been accessed by the unauthorized person between Sept. 5-20, 2019.
The email accounts stored a limited amount of patient data, including names and certain health information. Phoenix Children's has adopted other measures to help prevent a similar incident from happening again.
Although no credit card information was involved in the incident, Phoenix Children's recommends patients review credit and debit card account statements for any discrepancies. If they notice any suspicious activity, patients should contact the financial institutions that issued the card immediately.
Editor's note: This article was updated Jan. 29 at 7:30 p.m.