WGH confirms September data breach
A security event in September “potentially affected the confidentiality” of personal data on some Warren General Hospital patients and employees.
According to a Thursday news release, the hospital system noticed suspicious activity occurring on its computer network. WGH then took steps to secure its system, alerted federal law enforcement and partnered with cybersecurity specialists to investigate the “nature and scope” of the activity.
The subsequent investigation determined that an unknown actor had accessed some systems within the WGH network and downloaded information between Sept. 15 and 23. In response, the hospital system “undertook a comprehensive review of its internal records to determine what information was present on those systems and identified contact information to provide notification to potentially affected individuals.”
Information that potentially could have been accessed includes names, Social Security numbers, addresses, birth dates, health insurance forms, medical information and financial information, including payment and account information.
The hospital system is currently notifying individuals who may have been impacted by mail and has posted information on its website.
Government regulators are also being notified of the event.
Individuals seeking additional information are being asked to call a toll-free assistance line at 888-988-0582, Monday through Friday between 9 a.m. and 9 p.m.
“WGH takes this event and the security of personal information in its care very seriously. Upon learning of this event, WGH moved quickly to investigate and respond, assess the security of its network, and notify potentially affected individuals,” according to the release. “As part of its ongoing commitment to information security, WGH reviewed existing policies and procedures, enhanced administrative and technical controls, and provided additional security training to reduce the likelihood of a similar future event.”
The hospital system urged potentially affected individuals to review bank statements, credit reports and benefit information for errors and suspicious activities.
“Any suspicious activity should be promptly reported to their insurance company, health care provider, or financial institution.”
Additional information on protecting personal information is available on the system’s website at www.wgh.org.
