MaineGeneral Health has updated a breach notification from December indicating the protected health information and Social Security numbers of an additional 2,000 people may have been compromised.
The Augusta, Maine-based health system reported the breach in December after the FBI notified the health system some of the system's data was found on an external website. At that time, the system said information related to patients referred to MaineGeneral for radiology services was compromised, as well as the information of some employees. At that time, MaineGeneral indicated no Social Security numbers were involved in the breach, though did not indicate how many individuals were affected. A Kennebec Journal report indicated 118,000 individuals were affected.
Now, however, the health system's internal investigation by its IT team says Social Security numbers of patients may have been included in the breached data.
According to the Kennebec Journal, the update includes 2,000 more individuals whose information may have been compromised, bringing the total number of compromised records to 120,000. Not all information for every affected individual was breached.
"What we're reporting out today is anything we saw that could be potentially accessed," MaineGeneral Health CEO said, according to the report. "Out of the 120,000 people, different people had different data elements potentially accessed."
More articles on data breaches:
21k customer records hit by Blue Shield of California security breach
St. Mary's Medical Center faces PHI breach lawsuit
Why healthcare may see more HIPAA fines in the coming year