Some Ascension St. Vincent patient information 'likely stolen' from former business partner

INDIANAPOLIS -- Some Ascension St. Vincent patients across five states, including in Indiana, likely had their information stolen from a former business partner.




According to a news release, Ascension discovered on Dec. 5, 2024, that patient information was likely stolen during a "potential security incident" in Alabama, Michigan, Indiana, Tennessee and Texas. A subsequent investigation revealed that on Jan. 21 of this year, Ascension accidentally shared confidential information with a former business partner due to a reported software issue.




"Some of this information was likely stolen from them due to a vulnerability in third-party software used by the former business partner," the company said in a statement on Monday. "We have since reviewed our processes and are working to implement enhanced measures to prevent similar incidents from occurring in the future."




The company noted that the incident did not involve Ascension systems, networks or electronic health records.




Ascension said the information that was likely stolen included the patients' demographics, names, addresses, phone numbers, email addresses, birthdate, race, gender and their social security numbers.




Leaked information also potentially included details concerning patients and the names of their physicians, diagnoses, insurance company names and admission and discharge dates.




The release concluded with Ascension offering two years of complimentary credit monitoring and identity theft protection services to those who were affected. A call center has also been established for impacted patients to contact toll-free with their questions. The center can be reached Monday through Friday at (866) 408-3556 between 8 and 5:30 p.m. Central Time.





via: https://fox59.com/news/some-ascension-st-vincent-patient-information-likely-stolen-from-former-business-partner/