Medical Management LLC, a medical billing company, has begun telling an unnamed number of patients their information may have been accessed by a former employee.
The names, dates of birth and Social Security numbers of patients from a number of hospitals were inappropriately accessed by an employee who worked at Medical Management LLC until March of 2015, according to esecurityplanet.com. The former employee reportedly gave the private patient information to a third party.
Patients affected are being offered a year of identity theft protection services from Kroll for free.
Although no list of affected hospitals has been disclosed, the following hospitals have made public statements about the breach:
- Englewood Hospital and Medical Center (New Jersey)
- Holy Name Medical Center (New Jersey)
- The Valley Hospital (New Jersey)
- White Plains Hospital (New York)
- Conemaugh Health System (Pennsylvania)
- Grand View Health (Pennsylvania)
- Jefferson Hospital (Pennsylvania)
- The University of Pittsburgh Medical Center (Pennsylvania)