Montefiore Health System is notifying patients of a data breach after learning a former employee at Bronx, N.Y.-based system stole their personal health information.
The employee stole the information of 12,517 patients between January and June 2013. According to a Crain's New York Business report, Montefiore did not learn of the incident until May 15 when informed by law enforcement officials.
According to the notification, police advised Montefiore that the employee may have sold the stolen information. Crain's identified the employee as an assistant clerk.
Compromised information includes names, addresses, birth dates, Social Security information, next of kin information and health insurance details.
Montefiore fired the employee, who has also been arrested and is facing prosecution.
"Montefiore will not tolerate any violation of our patients' privacy. We are working closely with law enforcement, including the Manhattan District Attorney's office to assist in their investigation. Following this theft, Montefiore is expanding both our technology monitoring capabilities and employee training on safeguarding and accessing patient records to further bolster our privacy safeguards," according to the notification.
More articles on data breaches:
50k records stolen from pharmaceutical company Akorn offered to highest bidder
Opinion: To enhance cybersecurity, fire CEOs who don't view it as a business risk
Could HealthCare.gov's data warehouse be the target of the next big breach?: 5 things to know