[BreachExchange] Longmont medical clinic hacked, patient data possibly compromised

[Destry Winant]

http://www.timescall.com/longmont-local-news/ci_31554434/longmont-medical-clinic-hacked

Longs Peak Family Practice, a medical clinic in Longmont, suffered a
data breach that was discovered in November and might have compromised
patients' personal information.

Boulder law firm Caplan & Earnest on Wednesday issued a news release
on behalf of the medical clinic that a forensic investigator
discovered evidence of three instances of unauthorized access to the
clinic's computer network in November.

The law firm and clinic couldn't be immediately reached for comment on
Wednesday evening. Thenews release has been posted on the clinic's
website.

The news release stated that there is no evidence that patient
information was removed or accessed, but it is possible the hackers
downloaded the information.

The breach did not compromise credit card, billing or bank account
information. However, patients' names, birthdates, patient
identification numbers, phone numbers, email addresses, social
security numbers, insurance carrier, insurance payment codes with
associated costs, driver's license numbers and dates of service might
have been stolen.

The hackers might have also gained access to clinical information,
including medication conditions, diagnoses, medications, labs and
diagnostic studies and copies of notes by health care providers. Final
statements for any accounts being sent to collections might have been
involved in the breach.

The clinic has upgraded its computer system and reported the incidents
to police.

Patients who might have been affected are asked to monitor their
insurance statements, credit reports and financial statements and
report any irregularities immediately. The clinic has contracted
AllClear ID, a data breach response company, to protect patients'
personal information for a year at no charge.