Incident

Baptist Health Medical Center-Drew County reports data breach


Learn More

Baptist Health Medical Center-Drew County is reporting a data breach impacting patients, employees, and dependents. The breach occurred between April 22, 2024, and July 8, 2024, when an unauthorized party accessed the medical center’s IT environment.

The specific types of exposed data include:

For patients:

  • Names, in combination with one or more of the following:
    • Addresses
    • Dates of birth
    • Diagnoses
    • Treatment information
    • Medical record numbers
    • Provider names
    • Dates of treatment

For employees and dependents:

  • Names, in combination with:
    • Social Security numbers
    • Driver’s license numbers
    • Bank account information
    • Health insurance information

The number of affected individuals, nature of the breach and further details about the cause of the breach have not been disclosed.

Baptist Health Medical Center-Drew County has expressed regret over the incident and has taken action by notifying affected individuals through mailed letters between August 30, 2024, and September 30, 2024.

The medical center has set up a toll-free incident response line to address any concerns and questions.

 

Baptist Health Medical Center-Drew County reports data breach