Mosaic Medical, a nonprofit community health system with locations throughout central Oregon, reported a break-in incident at a health IT department in a temporary administrative office in Bend, according to KTVZ.
The health system has notified approximately 2,200 patients of the possible breach.
According to a statement, the break-in occurred the night of Jan. 14, 2015, though nothing was stolen from the office and the EMR system was not breached. "There is no evidence that anything in the office was disturbed," according to the statement.
"However, we cannot say with certainty that no medical records were accessed," the statement continues, saying paper documents containing health information, medical insurance information, phone numbers and email addresses could have been accessed.
Mosaic Medical has taken steps to improve its security, as well as moved its health IT department to a "more secure" location, according to the statement.
More articles on data breaches:
12 latest data breaches
UPMC employees' tax returns delayed due to 2014 data breach
Fear of data breaches leads 21% of patients to withhold information from physicians