A setting mistakenly turned on by Greenway Health, the vendor that provides Zephyrhills, Fla.-based Florida Medical Clinic's patient portal, compromised the private data of at least 1,000 patients, according to a notification on the organization's website.
Patients with "industrial accounts" were able to access the balance statements of others while the setting was turned on. Industrial accounts refer to accounts where a third-party is responsible for financing the cost of services provided by the clinic.
Upon discovering the breach, Florida Medical Clinic shut the setting off and the issue was resolved. The hospital also implemented additional protocols with Greenway to prevent future breaches.
There is no evidence any patient data has been used inappropriately. Breached data may have included names, providers, descriptions of procedures, charges and mailing address.