The Davis Clinic, which is owned by the University of Texas Health Science Center at Houston's physicians organization, sent multiple mass emails exposing 2,800 email addresses primarily belonging to its patients, according to Chron.
The clinic sent 19 batches of emails, including notification of a physician leaving the clinic, but failed to BCC the recipients. Each email made 100 to 300 email addresses visible. No individual health information, physical addresses, Social Security numbers, or diagnostic, insurance or other financial information was exposed.
The practice is strengthening its email processes, including vetting all electronic communications and updating practice-wide patient privacy training, according to Chron. Patients are encouraged to avoid opening emails from unfamiliar address.
More articles on cybersecurity:
Phishing campaigns use these 3 applications as disguises
DHS issues cybersecurity warning on GE Healthcare's ECG product: 5 notes
Blockchain, IoT security & more — Black Book names top healthcare cybersecurity companies across 18 categories