The breached information includes Indianapolis, Gynecology Center, Inc. Fort Wayne, and Rochester Medical Group. Patient names, mailing addresses, email addresses, and dates of birth. Some patients may have also had Social Security numbers, lab results, dictated reports, and medical conditions exposed. The company mentioned that it does not collect or store financial information or credit card information, so that data would not have been affected in the incident.
“Medical Informatics Engineering immediately began an investigation to identify and remediate any identified security vulnerability,” the statement explained. “Medical Informatics Engineering’s team, including independent third-party forensics experts, has been working continuously to investigate the attack and enhance data security and protection.”
MIE referred to the incident as a “sophisticated cyber attack”.
“On June 2, 2015, we began contacting and mailing notice letters disclosing this incident to affected NoMoreClipboard clients,” the company explained. “Affected individuals for whom we have a valid postal address will also be notified of this incident through U.S. mail. We will also be disclosing this incident to certain state and federal regulators.”
According to the statement, MIE will provide complimentary credit monitoring and identity protection services to affected individuals for two years.
Get your personal as well as office laptops encrypted by Alertsec
Unencrypted laptops present a major risk of data loss. 80% of information theft is due to lost or stolen laptops and other equipment. About 50% of network intrusions are performed with credentials gathered from lost or stolen devices. The penalties for a data breach are severe not only in terms of the monetary fines imposed on the organization, but also the potential loss of trust from customers and suppliers. Encryption software greatly enhances the security of your organization’s data as the information is not compromised if a laptop is lost or stolen.
Alertsec Xpress is the full disk encryption service that delivers a mobile data protection system for all information stored on laptops used throughout your organization.