The Chattanooga Heart Institute, a prominent cardiovascular practice, recently faced a significant data breach. The breach compromised confidential patient information stored on the organization's computer network, affecting over 160,000 patients.
On April 17, 2023, the Chattanooga Heart Institute detected signs of a cyberattack on its IT network. An investigation revealed that an unauthorized third party had gained access to the network between March 8 and March 16, 2023. By May 31, the institute confirmed that the unauthorized party had obtained copies of some data containing confidential patient information.
The compromised data includes patient names, mailing addresses, email addresses, phone numbers, dates of birth, driver's license numbers, Social Security numbers, account information, health insurance details, diagnosis/condition information, lab results, medications, and other clinical, demographic, or financial information.
Upon discovering the breach, the Chattanooga Heart Institute took immediate steps to secure its systems, contain the incident, and maintain continuity of care. The institute also notified federal law enforcement and began sending out notification letters to affected individuals.
To help alleviate concerns, the institute has secured the services of Equifax to provide identity monitoring at no cost to individuals whose data may have been compromised. The institute is also advising patients to review their healthcare statements for accuracy and report any discrepancies to their provider or insurance carrier.
The incident at the Chattanooga Heart Institute is part of a trend of cyberattacks targeting healthcare institutions. These attacks not only compromise patient privacy but can also disrupt critical healthcare services. As JD Supra reports, victims of the breach are being advised to seek legal counsel to understand their rights and potential remedies.
Related: Tampa General Hospital reports data breach affecting 1.2 million
The Chattanooga Heart Institute is completing a thorough forensic investigation of the incident. The institute has also enhanced its network security and monitoring tools to prevent similar incidents in the future. As the investigation continues, more information about the breach is expected to be released.
Related: HIPAA Compliant Email: The Definitive Guide