UMass Memorial Health Care's behavior health service in Worcester sent letters to 4,598 patients notifying them of an April 18 data breach, according to the Worcester Business Journal.
Community Healthlink disclosed on June 17 that two employees were victims in a phishing attack. The hacker was able to gain access to patients' names, dates of birth, ID numbers, diagnosis treatment information, health insurance information and Social Security numbers.
All patients affected have been notified. Community Healthlink is not aware if any personal health information was viewed as a result of the data breach.
Community Healthlink, which provides mental health, behavior health and substance abuse services, is offering affected patients free credit monitoring.