Perry County Medical Center, Inc. d/b/a Three Rivers Community Health Group Notifies Patients of Data Security Incident
Perry County Medical Center, Inc. d/b/a Three Rivers Community Health Group has become aware of a potential data security incident that may have resulted in the inadvertent exposure of patients’ personal and health information. Although at this time there is no indication that an unauthorized party actually accessed or viewed patient information or evidence of patient information being misused, we have taken steps to notify anyone who may have been affected by this incident.
On May 28, 2019, we discovered that an employee’s email account had been accessed by an unknown, unauthorized third party as the result of an email phishing attack. We immediately engaged computer experts to investigate the circumstances surrounding the intrusion and determine whether sensitive information was at risk. The investigation determined that an intruder could have viewed or accessed documents that contained patients’ names, dates of birth, physicians’ names, dates of service, pharmacy, prescriptions and insurance group ID numbers. For some patients, only a first and last name was in the compromised email account. Importantly, patients’ Social Security numbers or financial information were NOT impacted in this incident.
Although there is no evidence that an unauthorized third party actually viewed or accessed patient health information and we are not aware of anyone’s information being misused, we are committed to protecting the privacy and security of patients’ information and have taken steps to prevent a similar event from occurring in the future. Notification letters mailed on July 26, 2019, include additional information about what happened, a toll-free number where patients can learn more about the incident and further information about how impacted patients may secure free credit monitoring services. The call center is available Monday through Friday between 8 AM to 8 PM Central at 1-800-939-4170.
The privacy and security of patient information is a top priority for Perry County Medical Center, Inc. d/b/a Three Rivers Community Health Group, which deeply regrets any inconvenience or concern this incident may cause.